CVE-2024-35978

Summary

CVE-2024-35978 is a vulnerability affecting the Linux kernel's Bluetooth subsystem. The issue revolves around a memory leak in the function 'hci_req_sync_complete()'. Specifically, the code failed to properly free the previous sync request state before assigning a new one, leading to a memory leak. This vulnerability has now been resolved to prevent potential memory exhaustion and related security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.