GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-58009 (GCVE-0-2024-58009)

Vulnerability from cvelistv5 – Published: 2025-02-27 02:12 – Updated: 2026-05-23 15:56
VLAI
Title
Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc A NULL sock pointer is passed into l2cap_sock_alloc() when it is called from l2cap_sock_new_connection_cb() and the error handling paths should also be aware of it. Seemingly a more elegant solution would be to swap bt_sock_alloc() and l2cap_chan_create() calls since they are not interdependent to that moment but then l2cap_chan_create() adds the soon to be deallocated and still dummy-initialized channel to the global list accessible by many L2CAP paths. The channel would be removed from the list in short period of time but be a bit more straight-forward here and just check for NULL instead of changing the order of function calls. Found by Linux Verification Center (linuxtesting.org) with SVACE static analysis tool.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: f6ad641646b67f29c7578dcd6c25813c7dcbf51e , < a9a7672fc1a0fe18502493936ccb06413ab89ea6 (git)
Affected: daa13175a6dea312a76099066cb4cbd4fc959a84 , < 8e605f580a97530e5a3583beea458a3fa4cbefbd (git)
Affected: a8677028dd5123e5e525b8195483994d87123de4 , < cf601a24120c674cd7c907ea695f92617af6abd0 (git)
Affected: bb2f2342a6ddf7c04f9aefbbfe86104cd138e629 , < 297ce7f544aa675b0d136d788cad0710cdfb0785 (git)
Affected: 8ad09ddc63ace3950ac43db6fbfe25b40f589dd6 , < 245d48c1ba3e7a1779c2f4cbc6f581ddc8a78e22 (git)
Affected: 61686abc2f3c2c67822aa23ce6f160467ec83d35 , < 691218a50c3139f7f57ffa79fb89d932eda9571e (git)
Affected: 7c4f78cdb8e7501e9f92d291a7d956591bf73be9 , < 49c0d55d59662430f1829ae85b969619573d0fa1 (git)
Affected: 7c4f78cdb8e7501e9f92d291a7d956591bf73be9 , < 5f397409f8ee5bc82901eeaf799e1cbc4f8edcf1 (git)
Affected: 5.4.287 , < 5.4.291 (semver)
Affected: 5.10.231 , < 5.10.235 (semver)
Affected: 5.15.174 , < 5.15.179 (semver)
Affected: 6.1.120 , < 6.1.129 (semver)
Affected: 6.6.66 , < 6.6.78 (semver)
Affected: 6.12.5 , < 6.12.14 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.13
Unaffected: 0 , < 6.13 (semver)
Unaffected: 5.4.291 , ≤ 5.4.* (semver)
Unaffected: 5.10.235 , ≤ 5.10.* (semver)
Unaffected: 5.15.179 , ≤ 5.15.* (semver)
Unaffected: 6.1.129 , ≤ 6.1.* (semver)
Unaffected: 6.6.78 , ≤ 6.6.* (semver)
Unaffected: 6.12.14 , ≤ 6.12.* (semver)
Unaffected: 6.13.3 , ≤ 6.13.* (semver)
Unaffected: 6.14 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem Affected: 0 , < * (custom)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:33:22.791Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T12:01:51.321Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_sock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a9a7672fc1a0fe18502493936ccb06413ab89ea6",
              "status": "affected",
              "version": "f6ad641646b67f29c7578dcd6c25813c7dcbf51e",
              "versionType": "git"
            },
            {
              "lessThan": "8e605f580a97530e5a3583beea458a3fa4cbefbd",
              "status": "affected",
              "version": "daa13175a6dea312a76099066cb4cbd4fc959a84",
              "versionType": "git"
            },
            {
              "lessThan": "cf601a24120c674cd7c907ea695f92617af6abd0",
              "status": "affected",
              "version": "a8677028dd5123e5e525b8195483994d87123de4",
              "versionType": "git"
            },
            {
              "lessThan": "297ce7f544aa675b0d136d788cad0710cdfb0785",
              "status": "affected",
              "version": "bb2f2342a6ddf7c04f9aefbbfe86104cd138e629",
              "versionType": "git"
            },
            {
              "lessThan": "245d48c1ba3e7a1779c2f4cbc6f581ddc8a78e22",
              "status": "affected",
              "version": "8ad09ddc63ace3950ac43db6fbfe25b40f589dd6",
              "versionType": "git"
            },
            {
              "lessThan": "691218a50c3139f7f57ffa79fb89d932eda9571e",
              "status": "affected",
              "version": "61686abc2f3c2c67822aa23ce6f160467ec83d35",
              "versionType": "git"
            },
            {
              "lessThan": "49c0d55d59662430f1829ae85b969619573d0fa1",
              "status": "affected",
              "version": "7c4f78cdb8e7501e9f92d291a7d956591bf73be9",
              "versionType": "git"
            },
            {
              "lessThan": "5f397409f8ee5bc82901eeaf799e1cbc4f8edcf1",
              "status": "affected",
              "version": "7c4f78cdb8e7501e9f92d291a7d956591bf73be9",
              "versionType": "git"
            },
            {
              "lessThan": "5.4.291",
              "status": "affected",
              "version": "5.4.287",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.235",
              "status": "affected",
              "version": "5.10.231",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.179",
              "status": "affected",
              "version": "5.15.174",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.129",
              "status": "affected",
              "version": "6.1.120",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.78",
              "status": "affected",
              "version": "6.6.66",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.14",
              "status": "affected",
              "version": "6.12.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_sock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.13"
            },
            {
              "lessThan": "6.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.291",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.235",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.179",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.129",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.13.*",
              "status": "unaffected",
              "version": "6.13.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.291",
                  "versionStartIncluding": "5.4.287",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.235",
                  "versionStartIncluding": "5.10.231",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.179",
                  "versionStartIncluding": "5.15.174",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.129",
                  "versionStartIncluding": "6.1.120",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.78",
                  "versionStartIncluding": "6.6.66",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.14",
                  "versionStartIncluding": "6.12.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13.3",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc\n\nA NULL sock pointer is passed into l2cap_sock_alloc() when it is called\nfrom l2cap_sock_new_connection_cb() and the error handling paths should\nalso be aware of it.\n\nSeemingly a more elegant solution would be to swap bt_sock_alloc() and\nl2cap_chan_create() calls since they are not interdependent to that moment\nbut then l2cap_chan_create() adds the soon to be deallocated and still\ndummy-initialized channel to the global list accessible by many L2CAP\npaths. The channel would be removed from the list in short period of time\nbut be a bit more straight-forward here and just check for NULL instead of\nchanging the order of function calls.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE static\nanalysis tool."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:56:32.500Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a9a7672fc1a0fe18502493936ccb06413ab89ea6"
        },
        {
          "url": "https://git.kernel.org/stable/c/8e605f580a97530e5a3583beea458a3fa4cbefbd"
        },
        {
          "url": "https://git.kernel.org/stable/c/cf601a24120c674cd7c907ea695f92617af6abd0"
        },
        {
          "url": "https://git.kernel.org/stable/c/297ce7f544aa675b0d136d788cad0710cdfb0785"
        },
        {
          "url": "https://git.kernel.org/stable/c/245d48c1ba3e7a1779c2f4cbc6f581ddc8a78e22"
        },
        {
          "url": "https://git.kernel.org/stable/c/691218a50c3139f7f57ffa79fb89d932eda9571e"
        },
        {
          "url": "https://git.kernel.org/stable/c/49c0d55d59662430f1829ae85b969619573d0fa1"
        },
        {
          "url": "https://git.kernel.org/stable/c/5f397409f8ee5bc82901eeaf799e1cbc4f8edcf1"
        }
      ],
      "title": "Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-58009",
    "datePublished": "2025-02-27T02:12:04.637Z",
    "dateReserved": "2025-02-27T02:10:48.227Z",
    "dateUpdated": "2026-05-23T15:56:32.500Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-58009",
      "date": "2026-09-16",
      "epss": "0.00202",
      "percentile": "0.10284"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-58009\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-02-27T03:15:11.880\",\"lastModified\":\"2026-06-17T08:14:26.060\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc\\n\\nA NULL sock pointer is passed into l2cap_sock_alloc() when it is called\\nfrom l2cap_sock_new_connection_cb() and the error handling paths should\\nalso be aware of it.\\n\\nSeemingly a more elegant solution would be to swap bt_sock_alloc() and\\nl2cap_chan_create() calls since they are not interdependent to that moment\\nbut then l2cap_chan_create() adds the soon to be deallocated and still\\ndummy-initialized channel to the global list accessible by many L2CAP\\npaths. The channel would be removed from the list in short period of time\\nbut be a bit more straight-forward here and just check for NULL instead of\\nchanging the order of function calls.\\n\\nFound by Linux Verification Center (linuxtesting.org) with SVACE static\\nanalysis tool.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: L2CAP: gestionar puntero sock NULL en l2cap_sock_alloc Se pasa un puntero sock NULL a l2cap_sock_alloc() cuando se llama desde l2cap_sock_new_connection_cb() y las rutas de gesti\u00f3n de errores tambi\u00e9n deber\u00edan tenerlo en cuenta. Aparentemente, una soluci\u00f3n m\u00e1s elegante ser\u00eda intercambiar las llamadas bt_sock_alloc() y l2cap_chan_create() ya que no son interdependientes en ese momento, pero luego l2cap_chan_create() agrega el canal que pronto se desasignar\u00e1 y a\u00fan tiene inicializaci\u00f3n ficticia a la lista global accesible por muchas rutas L2CAP. El canal se eliminar\u00eda de la lista en un corto per\u00edodo de tiempo, pero aqu\u00ed ser\u00eda un poco m\u00e1s directo y solo verificar\u00eda si es NULL en lugar de cambiar el orden de las llamadas de funci\u00f3n. Encontrado por Linux Verification Center (linuxtesting.org) con la herramienta de an\u00e1lisis est\u00e1tico SVACE.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/bluetooth/l2cap_sock.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"f6ad641646b67f29c7578dcd6c25813c7dcbf51e\",\"lessThan\":\"a9a7672fc1a0fe18502493936ccb06413ab89ea6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"daa13175a6dea312a76099066cb4cbd4fc959a84\",\"lessThan\":\"8e605f580a97530e5a3583beea458a3fa4cbefbd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a8677028dd5123e5e525b8195483994d87123de4\",\"lessThan\":\"cf601a24120c674cd7c907ea695f92617af6abd0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bb2f2342a6ddf7c04f9aefbbfe86104cd138e629\",\"lessThan\":\"297ce7f544aa675b0d136d788cad0710cdfb0785\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8ad09ddc63ace3950ac43db6fbfe25b40f589dd6\",\"lessThan\":\"245d48c1ba3e7a1779c2f4cbc6f581ddc8a78e22\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"61686abc2f3c2c67822aa23ce6f160467ec83d35\",\"lessThan\":\"691218a50c3139f7f57ffa79fb89d932eda9571e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7c4f78cdb8e7501e9f92d291a7d956591bf73be9\",\"lessThan\":\"49c0d55d59662430f1829ae85b969619573d0fa1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7c4f78cdb8e7501e9f92d291a7d956591bf73be9\",\"lessThan\":\"5f397409f8ee5bc82901eeaf799e1cbc4f8edcf1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.4.287\",\"lessThan\":\"5.4.291\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.10.231\",\"lessThan\":\"5.10.235\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.174\",\"lessThan\":\"5.15.179\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.120\",\"lessThan\":\"6.1.129\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.66\",\"lessThan\":\"6.6.78\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.12.5\",\"lessThan\":\"6.12.14\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/bluetooth/l2cap_sock.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.13\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.13\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.291\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.235\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.179\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.129\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.78\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.14\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13.3\",\"lessThanOrEqual\":\"6.13.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.14\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4.287\",\"versionEndExcluding\":\"5.4.291\",\"matchCriteriaId\":\"183DD166-8DC4-4649-9A25-46BB2A24DFA9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.231\",\"versionEndExcluding\":\"5.10.235\",\"matchCriteriaId\":\"7E60D250-7DA5-421A-9276-3C406DB49BF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.174\",\"versionEndExcluding\":\"5.15.179\",\"matchCriteriaId\":\"7BD5DBB9-D703-4306-83D6-6C71ED09C66E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.120\",\"versionEndExcluding\":\"6.1.129\",\"matchCriteriaId\":\"022C9A3F-3004-4D03-BF8F-A31E7351A0B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.66\",\"versionEndExcluding\":\"6.6.78\",\"matchCriteriaId\":\"5687CE0A-79AA-464A-9531-3089807B3D4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12.5\",\"versionEndExcluding\":\"6.12.14\",\"matchCriteriaId\":\"858572F1-DBB9-468B-853F-AA825654CF14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.13.3\",\"matchCriteriaId\":\"0E92CEE3-1FC3-4AFC-A513-DEDBA7414F00\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/245d48c1ba3e7a1779c2f4cbc6f581ddc8a78e22\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/297ce7f544aa675b0d136d788cad0710cdfb0785\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/49c0d55d59662430f1829ae85b969619573d0fa1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5f397409f8ee5bc82901eeaf799e1cbc4f8edcf1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/691218a50c3139f7f57ffa79fb89d932eda9571e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8e605f580a97530e5a3583beea458a3fa4cbefbd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a9a7672fc1a0fe18502493936ccb06413ab89ea6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cf601a24120c674cd7c907ea695f92617af6abd0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-265688.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-30T10:23:36+00:00",
      "cve": "CVE-2024-58009",
      "id": "CVE-2024-58009",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:fixed": "305",
      "product_status:known_affected": "50",
      "product_status:known_not_affected": "138",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-58009.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T00:25:23Z",
      "cve": "CVE-2024-58009",
      "id": "CVE-2024-58009",
      "initial_release_date": "2025-02-28T02:23:03Z",
      "product_status:known_affected": "607",
      "product_status:known_not_affected": "177",
      "product_status:recommended": "440",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-58009",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-58009.json",
      "version": "54"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.