CVE-2024-56590EPSS p21.0%
CVE-2024-56590CVE-2024-56590
linux / linux_kernel
Description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
This fixes not checking if skb really contains an ACL header otherwise
the code may attempt to access some uninitilized/invalid memory past the
valid skb->data.
Scoring
| CVSS | 7.6 () |
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
| EPSS | 0.29% probability of exploitation · percentile 21.0% · 2026-08-05T12:04:55Z |
| Last modified | 2026-08-04 |