CVE-2024-35966

This is a vulnerability in the Linux kernel's Bluetooth RFCOMM protocol. It occurs because the rfcomm_sock_setsockopt_old() function fails to properly validate the length of user-supplied data, leading to out-of-bounds memory reads. This flaw could result in system instability or crashes.

This vulnerability is rated with a Moderate impact because exploitation requires local access and privileges to open Bluetooth sockets and execute malformed socket operations. In typical Red Hat Enterprise Linux server installations, Bluetooth subsystems and hardware are rarely enabled or utilized, which significantly reduces the effective attack surface. While a local attacker could trigger an out-of-bounds memory read leading to a kernel crash and denial of service, the issue does not directly grant privilege escalation or remote execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.