7.1

CVE-2024-35967: debian debian_linux Out-of-bounds Read

CVSS: 7.1v3.1HighModified
AliasesUBUNTU-CVE-2024-35967DEBIAN-CVE-2024-35967
Published 20-05-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-35967 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in debian debian_linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.9% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v3.1 (CVE.org)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 32 · Related 30
DLA-3842-1RHSA-2025:6966SUSE-SU-2024:2008-1SUSE-SU-2024:2019-1SUSE-SU-2024:2135-1SUSE-SU-2024:2190-1

Timeline

  1. 20-05-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported sco_sock_setsockopt() is copying data without checking user input length. BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in sco_sock_setsockopt+0xc0b/0xf90 net/bluetooth/sco.c:893 Read of size 4 at addr ffff88805f7b15a3 by task syz-executor.5/12578

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu122 products
  • linuxAll versions (No fix recorded) | < 5.4.0-204.224 | < 5.15.0-130.140 | < 6.8.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1137.147 | < 5.15.0-1076.83 | < 6.8.0-1011.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ b96e9c671b05f95126753a22145d4509d45ca197, < b0e30c37695b614bee69187f86eaf250e36606ce | ≥ b96e9c671b05f95126753a22145d4509d45ca197, < 2c2dc87cdebef3fe3b9d7a711a984c70e376e32e | ≥ b96e9c671b05f95126753a22145d4509d45ca197, < 7bc65d23ba20dcd7ecc094a12c181e594e5eb315 | ≥ b96e9c671b05f95126753a22145d4509d45ca197, < 72473db90900da970a16ee50ad23c2c38d107d8c | ≥ b96e9c671b05f95126753a22145d4509d45ca197, < 419a0ffca7010216f0fc265b08558d7394fa0ba7 | ≥ b96e9c671b05f95126753a22145d4509d45ca197, < 51eda36d33e43201e7a4fd35232e069b2c850b01 | 3.8
  • linux_kernel≥ 3.8, < 5.10.216 | ≥ 5.11, < 5.15.178 | ≥ 5.16, < 6.1.87 | ≥ 6.2, < 6.6.28 | ≥ 6.7, < 6.8.7 | 6.9:rc1 | 6.9:rc2 | 6.9:rc3

3 vendors · 126 products

References

29 links
Show all 29 references