cbcvebase.
CVE-2020-35499
published 2021-02-19

CVE-2020-35499: A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have a sanity…

PriorityP428medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.27%
19.5th percentile
A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BT_SNDMTU/BT_RCVMTU for SCO sockets. This could allow a local attacker with a special user privilege to crash the system (DOS) or leak kernel internal information.

Affected

9 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.10.4-1 (bookworm)linux 5.10.4-1 (bookworm)
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.4-15.10.4-1
linuxlinux_kernel>= 0 < 5.10.4-15.10.4-1
linuxlinux_kernel>= 0 < 5.10.4-15.10.4-1
linuxlinux_kernel>= 0 < 5.10.4-15.10.4-1
linuxlinux_kernel>= 5.10 < 5.10.45.10.4
msrccbl2_kernel_5.10.78.1-1_on_cbl_mariner_2.0
msrccm1_kernel_5.10.60.1-1_on_cbl_mariner_1.0

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv6.7MEDIUM
vendor_debian6.7MEDIUM
vendor_msrc6.7MEDIUM
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.