{"id":"CVE-2024-22099","revision":"fd019f1304ae4e18a91a7c15943b942b","records":[{"revision":"fd019f1304ae4e18a91a7c15943b942b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-22099","aliases":[],"title":"NULL pointer deference in rfcomm_check_security in Linux kernel","description":"NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.\n\nThis issue affects Linux kernel: v2.6.12-rc2.","state":0,"publishedAt":"2024-01-25T07:02:59.928+00:00","modifiedAt":"2026-10-15T00:38:01.131+00:00","affected":[{"ecosystem":"https://mirrors.openanolis.cn/anolis/","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"collectionURL\": \"https://mirrors.openanolis.cn/anolis/\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"modules\": [\n                        \"net\",\n                        \"bluetooth\"\n                    ],\n                    \"packageName\": \"kernel\",\n                    \"platforms\": [\n                        \"Linux\",\n                        \"x86\",\n                        \"ARM\"\n                    ],\n                    \"product\": \"Linux kernel\",\n                    \"programFiles\": [\n                        \"https://gitee.com/anolis/cloud-kernel/blob/release-5.10/net/bluetooth/rfcomm/core.c\"\n                    ],\n                    \"repo\": \"https://gitee.com/anolis/cloud-kernel.git\",\n                    \"vendor\": \"Linux\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"v6.8-rc1\",\n                            \"status\": \"affected\",\n                            \"version\": \"v2.6.12-rc2\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H","score":6.3,"severity":"MEDIUM"}],"references":["https://bugzilla.openanolis.cn/show_bug.cgi?id=7956","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVVYSTEVMPYGF6GDSOD44MUXZXAZHOHB/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSXNF4RLEFLH35BFUQGYXRRVHHUIVBAE/","https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-22099","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-22099","identifiers":["CVE-2024-22099"]},"retained":false,"historicalAffected":[]}],"coverage":[]}