CVE-2024-57988

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()

devm_kstrdup() can return a NULL pointer on failure,but this returned value in btbcm_get_board_name() is not checked. Add NULL check in btbcm_get_board_name(), to handle kernel NULL pointer dereference error.

This vulnerability is rated as Moderate impact because exploitation requires local access and attached Broadcom Bluetooth hardware, resulting at most in a denial of service. The issue occurs when memory allocation fails during board name retrieval within the Broadcom Bluetooth driver, triggering a kernel crash. Typical server environments that do not deploy Bluetooth peripherals or where the driver is unused remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.