LiveActive security incident?Get immediate response
CVE Record

CVE-2024-35964: Bluetooth: ISO: Fix not validating setsockopt user input

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before copying data.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

CVE-2024-35964 is a Linux kernel Bluetooth ISO issue where the kernel failed to validate user-provided setsockopt input length before copying data. The public record confirms a kernel fix, but does not provide CVSS, impact details, or active exploitation evidence.

Executive priority

Prioritize through the normal kernel patch cycle unless local exposure is high or Bluetooth-capable Linux devices are broadly deployed. Escalate if vendor advisories later assign high severity or confirm exploitable impact.

Technical view

The flaw is in Linux kernel Bluetooth ISO setsockopt handling. The fix adds input length validation before copying user data. Affected data indicates Linux 6.x kernel lines and stable commit references, but the public bundle does not define a CWE, attack vector, or concrete impact.

Likely exposure

Exposure is most relevant to systems running affected Linux 6.x kernels with Bluetooth ISO functionality present. Servers, laptops, embedded systems, and Debian LTS environments should be checked through vendor kernel package status, not only upstream version strings.

Exploitation context

The provided sources do not show CISA KEV listing, public exploitation, exploit availability, or real-world abuse. Because impact and vector details are incomplete, treat this as a kernel hardening update requiring normal vulnerability-management review.

Researcher notes

The public record is sparse: no CVSS, CWE, exploit status, or detailed impact is included. Analysis should focus on the upstream patch, distro backports, kernel configuration, and whether reachable local userspace can exercise the affected Bluetooth ISO option path.

Mitigation direction

  • Apply vendor kernel updates that include the referenced stable fixes.
  • For Debian LTS systems, review and apply the January 2025 security update.
  • Check distribution advisories for backported fixes before relying on version numbers.
  • Disable unnecessary Bluetooth functionality where operationally acceptable until patched.

Validation and detection

  • Inventory Linux kernel versions across affected endpoints and servers.
  • Confirm installed kernel packages include the relevant upstream stable fix commits.
  • Check whether Bluetooth and Bluetooth ISO support are enabled on in-scope systems.
  • Review vendor advisories for platform-specific affected and fixed versions.
Prepared
Confidence
medium
Sources
7

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2024-35964 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
2ADP providers
6Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CVECVE Program Container
CISA-ADPCISA ADP Vulnrichment
other:ssvc

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinuxccf74f2390d60a2f9a75ef496d2564abb478f46a, ccf74f2390d60a2f9a75ef496d2564abb478f46a, ccf74f2390d60a2f9a75ef496d2564abb478f46a, ccf74f2390d60a2f9a75ef496d2564abb478f46aunaffected
LinuxLinux6.0, 0, 6.1.119, 6.6.55, 6.8.7, 6.9affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.