CVE-2024-35856: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hci_devcd_append() would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb. Reported-by : Dan Carpenter <dan.carpenter@linaro.org>

Affected products

• Linux Linux Kernel: from 6.6, before 6.6.30 (fixed in 6.6.30); from 6.7, before 6.8.9 (fixed in 6.8.9); version 6.9 only

Published 2024-05-17. Last modified 2026-08-04.