CVE-2024-26889
Bluetooth: hci_core: Fix possible buffer overflow
MEDIUM
5.5
CVSS Score
Published: April 17, 2024 at 10:27 AM UTC
Updated: October 15, 2026 at 01:17 AM UTC
3 products affected across 3 vendorsLinux KernelDebian LinuxSIMATIC S7-1500 TM MFP
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Debian Linux· Debiandrupal
95%4.14.328 ≤ v < 4.154.19.297 ≤ v < 4.19.3115.10.199 ≤ v < 5.10.2145.15.137 ≤ v < 5.15.1535.4.259 ≤ v < 5.4.2736.1.60 ≤ v < 6.1.836.5.9 ≤ v < 6.6.236.7 ≤ v < 6.7.116.8 ≤ v < 6.8.2194ab82c1ea187512ff2f822124bd05b63fc9f764.14.3284.19.2975.10.1995.15.1375.4.2595558f4312dca43cebfb9a1aab3d632be91bbb7366.1.606.5.96.6a55d53ad5c86aee3f6da50ee73626008997673fab48595f5b1c6e81e06e164e7d2b7a30b1776161ebbec1724519ecd9c468d1186a8f30b7567175bfbd9ce7d438366431e5688be98d8680336ce0a0f8ddcda165706b9fbfd685898d46a6749d7d397e0c0ffb060b136dd75a033ced0fc0aed2882c02e8b56
Vendor states this is fixed in 2e845867b4e279eff0a19ade253390470e07e8a1 (fixed)
Vendor states this is fixed in 2edce8e9a99dd5e4404259d52e754fdc97fb42c2 (fixed)
Vendor states this is fixed in 54a03e4ac1a41edf8a5087bd59f8241b0de96d3d (fixed)
Vendor states this is fixed in 6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac (fixed)
Vendor states this is fixed in 81137162bfaa7278785b24c1fd2e9e74f082e8e4 (fixed)
Vendor states this is fixed in 8c28598a2c29201d2ba7fc37539a7d41c264fb10 (fixed)
Vendor states this is fixed in a41c8efe659caed0e21422876bbb6b73c15b5244 (fixed)
Vendor states this is fixed in d47e6c1932cee02954ea588c9f09fd5ecefeadfc (fixed)
Affected range stops below 4.15, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 4.19.311 (unaffected)
Vendor states this is fixed in 5.10.214 (unaffected)
Vendor states this is fixed in 5.15.153 (unaffected)
Vendor states this is fixed in 5.4.273 (unaffected)
Affected range stops below 6.1.83, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.2, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.6 (unaffected)
Vendor states this is fixed in 6.6.23 (unaffected)
Vendor states this is fixed in 6.7.11 (unaffected)
Vendor states this is fixed in 6.8.2 (unaffected)
Vendor states this is fixed in 6.9 (unaffected)
All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/2e845867b4e279eff0a19ade253390470e07e8a1
- https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2
- https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3d
- https://git.kernel.org/stable/c/6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac
- https://git.kernel.org/stable/c/81137162bfaa7278785b24c1fd2e9e74f082e8e4
References (12)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2e845867b4e279eff0a19ade253390470e07e8a1Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2edce8e9a99dd5e4404259d52e754fdc97fb42c2Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/54a03e4ac1a41edf8a5087bd59f8241b0de96d3dPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8acPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/81137162bfaa7278785b24c1fd2e9e74f082e8e4Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8c28598a2c29201d2ba7fc37539a7d41c264fb10Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a41c8efe659caed0e21422876bbb6b73c15b5244Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d47e6c1932cee02954ea588c9f09fd5ecefeadfcSSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
5.5MEDIUMCISA-ADP
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-120
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card