CVE-2024-26890

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a Bluetooth vulnerability, specifically an out-of-bounds memory access in the btrtl driver. The problem is detected by KASAN. The btrtl driver uses private HCI data to store 'struct btrealtek data'. When the btrtl driver is used with btusb, memory for private HCI data is allocated in btusb. However, no private data is allocated after hci dev when btrtl is used with hci h5. This commit adds memory allocation for the hci h5 case.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.