CVE-2024-26889

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2024-04-17 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

Weakness Classification (1)

CWE-120

Affected Software (21)

Vendor	Product	Version
Linux	Linux	194ab82c1ea187512ff2f822124bd05b63fc9f76 < 6d5a9d4a7bcbb7534ce45a18a52e7bd23e69d8ac
Linux	Linux	b48595f5b1c6e81e06e164e7d2b7a30b1776161e < 54a03e4ac1a41edf8a5087bd59f8241b0de96d3d
Linux	Linux	ffb060b136dd75a033ced0fc0aed2882c02e8b56 < d47e6c1932cee02954ea588c9f09fd5ecefeadfc
Linux	Linux	bbec1724519ecd9c468d1186a8f30b7567175bfb < 2e845867b4e279eff0a19ade253390470e07e8a1
Linux	Linux	a55d53ad5c86aee3f6da50ee73626008997673fa < 0477ac14251d0ba813f311bb5db79eb07d99bfcc
Linux	Linux	dcda165706b9fbfd685898d46a6749d7d397e0c0 < a41c8efe659caed0e21422876bbb6b73c15b5244
Linux	Linux	dcda165706b9fbfd685898d46a6749d7d397e0c0 < 8c28598a2c29201d2ba7fc37539a7d41c264fb10
Linux	Linux	dcda165706b9fbfd685898d46a6749d7d397e0c0 < 2edce8e9a99dd5e4404259d52e754fdc97fb42c2
Linux	Linux	dcda165706b9fbfd685898d46a6749d7d397e0c0 < 81137162bfaa7278785b24c1fd2e9e74f082e8e4
Linux	Linux	d9ce7d438366431e5688be98d8680336ce0a0f8d
Linux	Linux	5558f4312dca43cebfb9a1aab3d632be91bbb736
Linux	Linux	4.19.297 < 4.19.311
Linux	Linux	5.4.259 < 5.4.273
Linux	Linux	5.10.199 < 5.10.214
Linux	Linux	5.15.137 < 5.15.153
Linux	Linux	6.1.60 < 6.1.191
Linux	Linux	4.14.328 < 4.15
Linux	Linux	6.5.9 < 6.6
Linux	Linux	6.6
debian	debian_linux	10.0
linux	linux_kernel	4.14.328 – 4.15