vulnerability

Oracle Linux: CVE-2024-36032: ELSA-2024-12618: Unbreakable Enterprise kernel security update (IMPORTANT)

Severity
1
CVSS
(AV:L/AC:L/Au:M/C:N/I:P/A:N)
Published
May 30, 2024
Added
Oct 16, 2024
Modified
Dec 3, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: qca: fix info leak when fetching fw build id
Add the missing sanity checks and move the 255-byte build-id buffer off
the stack to avoid leaking stack data through debugfs in case the
build-info reply is malformed.

Solution

oracle-linux-upgrade-kernel-uek
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.