CVE-2024-36880

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the qca component of the Linux kernel's Bluetooth functionality, where missing firmware sanity checks can lead to memory corruption beyond the vmalloced buffer when parsing firmware files. This can result in a denial of service. The vulnerability is caused by improper input validation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.