CVE-2024-36032: Linux Kernel

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix info leak when fetching fw build id Add the missing sanity checks and move the 255-byte build-id buffer off the stack to avoid leaking stack data through debugfs in case the build-info reply is malformed.

Affected products

• Linux Linux Kernel: from 5.12, before 5.15.162 (fixed in 5.15.162); from 5.16, before 6.1.91 (fixed in 6.1.91); from 6.2, before 6.6.31 (fixed in 6.6.31); from 6.7, before 6.8.10 (fixed in 6.8.10); version 6.9 only

Published 2024-05-30. Last modified 2026-08-04.