5 CVEs - Bluetooth: Fix not validating setsockopt user input (!4994) · Merge requests · Red Hat / centos-stream / src / kernel / centos-stream-9 · GitLab

Bastien Nocera requested to merge bnocera/centos-stream-9:wip/hadess/setsockopt-input into main Aug 12, 2024

Bluetooth: Fix not validating setsockopt user input

5 separate CVEs, 4 of them relying on the helper added in the first of the batch.

JIRA: https://issues.redhat.com/browse/RHEL-37411 CVE: CVE-2024-35963

JIRA: https://issues.redhat.com/browse/RHEL-37396 CVE: CVE-2024-35967

JIRA: https://issues.redhat.com/browse/RHEL-37404 CVE: CVE-2024-35965

JIRA: https://issues.redhat.com/browse/RHEL-37406 CVE: CVE-2024-35964

JIRA: https://issues.redhat.com/browse/RHEL-37400 CVE: CVE-2024-35966

Signed-off-by: Bastien Nocera bnocera@redhat.com