CVSS 3.1 Score 5.5 of 10 (medium)


Published May 20, 2024
Updated: May 23, 2024
CWE ID 401


CVE-2024-35978 is a vulnerability in the Linux kernel that affects multiple products. It has a base severity rating of MEDIUM with a base score of 5.5. The vulnerability is classified as CWE-401, which refers to the "Missing Release of Memory after Effective Lifetime" weakness. It has an exploitability score of 1.8 and requires low privileges and no user interaction to be exploited. The attack vector is local, and there is no impact on integrity or confidentiality. The vulnerability poses a potential danger to organizations as it could lead to a denial of service due to high availability impact. A memory leak in the Bluetooth feature has been resolved by freeing the previous sync request state before assigning reference to a new one. No further analysis or information about potential dangers to organizations is provided in the source text.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-35978 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options