CVE-2024-38620 (GCVE-0-2024-38620)
Vulnerability from cvelistv5
Published
2024-06-20 08:03
Modified
2026-08-23 12:45
Severity ?
8.8 (High) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCI_AMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no longer need to differentiate between AMP and Primary controllers, as only HCI_PRIMARY is left, this also remove hdev->dev_type altogether.
References
Impacted products
Vendor Product Version
Linux Linux Version: 244bc377591c3882f454882357bc730c90cbedb5
Version: 244bc377591c3882f454882357bc730c90cbedb5
Version: 244bc377591c3882f454882357bc730c90cbedb5
Version: 244bc377591c3882f454882357bc730c90cbedb5
Version: 244bc377591c3882f454882357bc730c90cbedb5
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-38620",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-20T16:21:10.645379Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-20T16:22:30.641Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:12:26.064Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/bluetooth/btmrvl_main.c",
            "drivers/bluetooth/btrsi.c",
            "drivers/bluetooth/btsdio.c",
            "drivers/bluetooth/btusb.c",
            "drivers/bluetooth/hci_bcm4377.c",
            "drivers/bluetooth/hci_ldisc.c",
            "drivers/bluetooth/hci_serdev.c",
            "drivers/bluetooth/hci_uart.h",
            "drivers/bluetooth/hci_vhci.c",
            "drivers/bluetooth/virtio_bt.c",
            "include/net/bluetooth/hci.h",
            "include/net/bluetooth/hci_core.h",
            "include/uapi/linux/virtio_bt.h",
            "net/bluetooth/hci_conn.c",
            "net/bluetooth/hci_core.c",
            "net/bluetooth/hci_event.c",
            "net/bluetooth/hci_sock.c",
            "net/bluetooth/hci_sync.c",
            "net/bluetooth/l2cap_core.c",
            "net/bluetooth/mgmt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9e6cf0eccfe15b67bf9773ecd101162dfdfed5e2",
              "status": "affected",
              "version": "244bc377591c3882f454882357bc730c90cbedb5",
              "versionType": "git"
            },
            {
              "lessThan": "5af2e235b0d5b797e9531a00c50058319130e156",
              "status": "affected",
              "version": "244bc377591c3882f454882357bc730c90cbedb5",
              "versionType": "git"
            },
            {
              "lessThan": "d3c7b012d912b31ad23b9349c0e499d6dddd48ec",
              "status": "affected",
              "version": "244bc377591c3882f454882357bc730c90cbedb5",
              "versionType": "git"
            },
            {
              "lessThan": "af1d425b6dc67cd67809f835dd7afb6be4d43e03",
              "status": "affected",
              "version": "244bc377591c3882f454882357bc730c90cbedb5",
              "versionType": "git"
            },
            {
              "lessThan": "84a4bb6548a29326564f0e659fb8064503ecc1c7",
              "status": "affected",
              "version": "244bc377591c3882f454882357bc730c90cbedb5",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/bluetooth/btmrvl_main.c",
            "drivers/bluetooth/btrsi.c",
            "drivers/bluetooth/btsdio.c",
            "drivers/bluetooth/btusb.c",
            "drivers/bluetooth/hci_bcm4377.c",
            "drivers/bluetooth/hci_ldisc.c",
            "drivers/bluetooth/hci_serdev.c",
            "drivers/bluetooth/hci_uart.h",
            "drivers/bluetooth/hci_vhci.c",
            "drivers/bluetooth/virtio_bt.c",
            "include/net/bluetooth/hci.h",
            "include/net/bluetooth/hci_core.h",
            "include/uapi/linux/virtio_bt.h",
            "net/bluetooth/hci_conn.c",
            "net/bluetooth/hci_core.c",
            "net/bluetooth/hci_event.c",
            "net/bluetooth/hci_sock.c",
            "net/bluetooth/hci_sync.c",
            "net/bluetooth/l2cap_core.c",
            "net/bluetooth/mgmt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.3"
            },
            {
              "lessThan": "4.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.184",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.184",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.33",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.12",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.3",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "4.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HCI: Remove HCI_AMP support\n\nSince BT_HS has been remove HCI_AMP controllers no longer has any use so\nremove it along with the capability of creating AMP controllers.\n\nSince we no longer need to differentiate between AMP and Primary\ncontrollers, as only HCI_PRIMARY is left, this also remove\nhdev-\u003edev_type altogether."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The broken paths (`l2cap_recv_acldata`, `l2cap_connect`, `l2cap_connect_cfm`\u2192`l2cap_conn_add`, `hci_queue_acl`, `hci_num_comp_blocks_evt`) all process ACL/L2CAP traffic and link events originating from a remote Bluetooth peer in radio range of an AMP-capable controller, which real hardware ships as (btusb USB class e0/01/04, btmrvl SDIO combo chips, btsdio SDIO_CLASS_BT_AMP, virtio-bt). Bluetooth radio proximity is the adjacent-network vector.\nAC:L - Once an HCI_AMP controller is present \u2014 the default state on affected hardware, requiring no attacker setup \u2014 the inconsistent paths are reached deterministically by initiating an ACL/L2CAP connection and sending data; there is no race and no memory layout the attacker cannot influence.\nPR:N - An adjacent Bluetooth attacker needs no credentials on the target: `hci_conn_request_evt` and `l2cap_connect_cfm`/`l2cap_conn_add` run before any pairing or authorization, and `l2cap_connect` explicitly exempts the SDP PSM from the link-mode security check.\nUI:N - No victim action is required \u2014 inbound connection establishment and ACL data reception are handled autonomously by the kernel once Bluetooth is up.\nS:U - All corruption and crashes stay inside the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - `hci_queue_acl()` builds ACL headers from `chan-\u003ehandle` rather than `conn-\u003ehandle` on AMP hdevs, so L2CAP payloads can be emitted tagged with the wrong link handle, and the state corruption in the connection/scheduler bookkeeping is of a class leverageable for kernel memory disclosure.\nI:H - `hci_num_comp_blocks_evt` applies an unbounded `conn-\u003esent -= block_count` to a `hci_chan` that should never have existed, underflowing an unsigned counter that drives `hci_quote_sent`/`hci_low_sent` quota arithmetic, and the ACL handle confusion lets frames be attributed to the wrong connection \u2014 kernel state under attacker influence.\nA:H - `__get_blocks()` divides by controller-supplied `hdev-\u003eblock_len` on the block-based path that only AMP controllers select, giving a divide-by-zero kernel oops; separately, `hci_sched_acl()` never drains the AMP queues so `chan-\u003edata_q` grows without bound until memory is exhausted."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T12:45:18.071Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9e6cf0eccfe15b67bf9773ecd101162dfdfed5e2"
        },
        {
          "url": "https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156"
        },
        {
          "url": "https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec"
        },
        {
          "url": "https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03"
        },
        {
          "url": "https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7"
        }
      ],
      "title": "Bluetooth: HCI: Remove HCI_AMP support",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-38620",
    "datePublished": "2024-06-20T08:03:43.906Z",
    "dateReserved": "2024-06-18T19:36:34.945Z",
    "dateUpdated": "2026-08-23T12:45:18.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T04:12:26.064Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-38620\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-20T16:21:10.645379Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-20T16:22:27.372Z\"}}], \"cna\": {\"title\": \"Bluetooth: HCI: Remove HCI_AMP support\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:A - The broken paths (`l2cap_recv_acldata`, `l2cap_connect`, `l2cap_connect_cfm`\\u2192`l2cap_conn_add`, `hci_queue_acl`, `hci_num_comp_blocks_evt`) all process ACL/L2CAP traffic and link events originating from a remote Bluetooth peer in radio range of an AMP-capable controller, which real hardware ships as (btusb USB class e0/01/04, btmrvl SDIO combo chips, btsdio SDIO_CLASS_BT_AMP, virtio-bt). Bluetooth radio proximity is the adjacent-network vector.\\nAC:L - Once an HCI_AMP controller is present \\u2014 the default state on affected hardware, requiring no attacker setup \\u2014 the inconsistent paths are reached deterministically by initiating an ACL/L2CAP connection and sending data; there is no race and no memory layout the attacker cannot influence.\\nPR:N - An adjacent Bluetooth attacker needs no credentials on the target: `hci_conn_request_evt` and `l2cap_connect_cfm`/`l2cap_conn_add` run before any pairing or authorization, and `l2cap_connect` explicitly exempts the SDP PSM from the link-mode security check.\\nUI:N - No victim action is required \\u2014 inbound connection establishment and ACL data reception are handled autonomously by the kernel once Bluetooth is up.\\nS:U - All corruption and crashes stay inside the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\\nC:H - `hci_queue_acl()` builds ACL headers from `chan-\u003ehandle` rather than `conn-\u003ehandle` on AMP hdevs, so L2CAP payloads can be emitted tagged with the wrong link handle, and the state corruption in the connection/scheduler bookkeeping is of a class leverageable for kernel memory disclosure.\\nI:H - `hci_num_comp_blocks_evt` applies an unbounded `conn-\u003esent -= block_count` to a `hci_chan` that should never have existed, underflowing an unsigned counter that drives `hci_quote_sent`/`hci_low_sent` quota arithmetic, and the ACL handle confusion lets frames be attributed to the wrong connection \\u2014 kernel state under attacker influence.\\nA:H - `__get_blocks()` divides by controller-supplied `hdev-\u003eblock_len` on the block-based path that only AMP controllers select, giving a divide-by-zero kernel oops; separately, `hci_sched_acl()` never drains the AMP queues so `chan-\u003edata_q` grows without bound until memory is exhausted.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"244bc377591c3882f454882357bc730c90cbedb5\", \"lessThan\": \"9e6cf0eccfe15b67bf9773ecd101162dfdfed5e2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"244bc377591c3882f454882357bc730c90cbedb5\", \"lessThan\": \"5af2e235b0d5b797e9531a00c50058319130e156\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"244bc377591c3882f454882357bc730c90cbedb5\", \"lessThan\": \"d3c7b012d912b31ad23b9349c0e499d6dddd48ec\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"244bc377591c3882f454882357bc730c90cbedb5\", \"lessThan\": \"af1d425b6dc67cd67809f835dd7afb6be4d43e03\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"244bc377591c3882f454882357bc730c90cbedb5\", \"lessThan\": \"84a4bb6548a29326564f0e659fb8064503ecc1c7\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/bluetooth/btmrvl_main.c\", \"drivers/bluetooth/btrsi.c\", \"drivers/bluetooth/btsdio.c\", \"drivers/bluetooth/btusb.c\", \"drivers/bluetooth/hci_bcm4377.c\", \"drivers/bluetooth/hci_ldisc.c\", \"drivers/bluetooth/hci_serdev.c\", \"drivers/bluetooth/hci_uart.h\", \"drivers/bluetooth/hci_vhci.c\", \"drivers/bluetooth/virtio_bt.c\", \"include/net/bluetooth/hci.h\", \"include/net/bluetooth/hci_core.h\", \"include/uapi/linux/virtio_bt.h\", \"net/bluetooth/hci_conn.c\", \"net/bluetooth/hci_core.c\", \"net/bluetooth/hci_event.c\", \"net/bluetooth/hci_sock.c\", \"net/bluetooth/hci_sync.c\", \"net/bluetooth/l2cap_core.c\", \"net/bluetooth/mgmt.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.3\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.3\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.184\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.33\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/bluetooth/btmrvl_main.c\", \"drivers/bluetooth/btrsi.c\", \"drivers/bluetooth/btsdio.c\", \"drivers/bluetooth/btusb.c\", \"drivers/bluetooth/hci_bcm4377.c\", \"drivers/bluetooth/hci_ldisc.c\", \"drivers/bluetooth/hci_serdev.c\", \"drivers/bluetooth/hci_uart.h\", \"drivers/bluetooth/hci_vhci.c\", \"drivers/bluetooth/virtio_bt.c\", \"include/net/bluetooth/hci.h\", \"include/net/bluetooth/hci_core.h\", \"include/uapi/linux/virtio_bt.h\", \"net/bluetooth/hci_conn.c\", \"net/bluetooth/hci_core.c\", \"net/bluetooth/hci_event.c\", \"net/bluetooth/hci_sock.c\", \"net/bluetooth/hci_sync.c\", \"net/bluetooth/l2cap_core.c\", \"net/bluetooth/mgmt.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9e6cf0eccfe15b67bf9773ecd101162dfdfed5e2\"}, {\"url\": \"https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156\"}, {\"url\": \"https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec\"}, {\"url\": \"https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03\"}, {\"url\": \"https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: HCI: Remove HCI_AMP support\\n\\nSince BT_HS has been remove HCI_AMP controllers no longer has any use so\\nremove it along with the capability of creating AMP controllers.\\n\\nSince we no longer need to differentiate between AMP and Primary\\ncontrollers, as only HCI_PRIMARY is left, this also remove\\nhdev-\u003edev_type altogether.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.184\", \"versionStartIncluding\": \"4.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.33\", \"versionStartIncluding\": \"4.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8.12\", \"versionStartIncluding\": \"4.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.3\", \"versionStartIncluding\": \"4.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"4.3\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-23T12:45:18.071Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-38620\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-23T12:45:18.071Z\", \"dateReserved\": \"2024-06-18T19:36:34.945Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-06-20T08:03:43.906Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.