What’s Vulnerable › Vulnerabilities

CVE-2024-35850: Bluetooth: qca: fix NULL-deref on non-serdev setup

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NULL-deref on non-serdev setup Qualcomm ROME controllers can be registered from the Bluetooth line discipline and in this case the HCI UART serdev pointer is NULL. Add the missing sanity check to prevent a NULL-pointer dereference when setup() is called for a non-serdev controller.

Affected products

• Linux kernel: from 6.2 before 6.6.30; from 6.7 before 6.8.9; 6.9-rc1, 6.9-rc2, 6.9-rc3, 6.9-rc4, 6.9-rc5 — fixed in 6.6.30, 6.8.9

How to fix

Upgrade to a fixed version: Linux kernel 6.6.30, 6.8.9. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/67459f1a707aae6d590454de07956c2752e21ea4
• https://git.kernel.org/stable/c/7ddb9de6af0f1c71147785b12fd7c8ec3f06cc86
• https://git.kernel.org/stable/c/bec4d4c6fa5c6526409f582e4f31144e20c86c21
• https://git.kernel.org/stable/c/67459f1a707aae6d590454de07956c2752e21ea4
• https://git.kernel.org/stable/c/7ddb9de6af0f1c71147785b12fd7c8ec3f06cc86
• https://git.kernel.org/stable/c/bec4d4c6fa5c6526409f582e4f31144e20c86c21

Get alerted when CVE-2024-35850 or the next vulnerability affects your stack