Vulnerability Database

311,378

Total vulnerabilities in the database

CVE-2024-26889

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_core: Fix possible buffer overflow

struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy.

  • Published: Apr 17, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-26889
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 6.7 6.7.11
linux / linux_kernel 6.8 6.8.2
linux / linux_kernel 4.14.328 4.15
linux / linux_kernel 4.19.297 4.19.311
linux / linux_kernel 5.10.199 5.10.214
linux / linux_kernel 5.15.137 5.15.153
linux / linux_kernel 5.4.259 5.4.273
linux / linux_kernel 6.1.60 6.1.83
linux / linux_kernel 6.5.9 6.6.23
debian / debian_linux 10.0 10.0.x