First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-35964

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix not validating setsockopt user input

Check user input length before copying data.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= ccf74f2390d60a2f9a75ef496d2564abb478f46a, < cec736e60dc18d91b88af28d96664bff284b02d1; >= ccf74f2390d60a2f9a75ef496d2564abb478f46a, < 6a6baa1ee7a9df33adbf932305053520b9741b35; >= ccf74f2390d60a2f9a75ef496d2564abb478f46a, < 0c4a89f4690478969729c7ba5f69d53d8516aa12; >= ccf74f2390d60a2f9a75ef496d2564abb478f46a, < 9e8742cdfc4b0e65266bb4a901a19462bda9285e
Linux	Linux	6.0

References

Timeline

Published: May 20, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-359657.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix not validating setsockopt user input Check user CVE-2024-359667.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix not validating setsockopt user input syzbot rep CVE-2024-359677.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot report CVE-2024-359685.5In the Linux kernel, the following vulnerability has been resolved: pds_core: Fix pdsc_check_pci_health function to use work thread When t CVE-2024-359698.8In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Alt CVE-2024-35976.1The Export WP Page to Static HTML/CSS plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.2.2. This CVE-2024-359706.3In the Linux kernel, the following vulnerability has been resolved: af_unix: Clear stale u->oob_skb. syzkaller started to report deadlock CVE-2024-359715.5In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang The CVE-2024-359725.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() If ul CVE-2024-359735.5In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve[6]_xmit_skb syzbot is able to CVE-2024-359745.5In the Linux kernel, the following vulnerability has been resolved: block: fix q->blkg_list corruption during disk rebind Multiple gendisk CVE-2024-359755.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix transmit scheduler resource leak Inorder to support

CVE-2024-35964: High severity, CVSS 7.1 | Vulnix