CVE-2024-57988
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 7, 2025
CWE ID 476
Summary
CVE-2024-57988 is a vulnerability affecting the Linux kernel. It involves a NULL dereference issue in the function btbcm_get_board_name() of the Bluetooth subsystem. The problem arises because devm_kstrdup(), which is used to duplicate a string, can return a NULL pointer upon failure. However, this potential NULL return value is not checked in btbcm_get_board_name(), leading to a kernel pointer dereference error. To mitigate this issue, a NULL check has been implemented in the function to prevent such errors.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX