What is CVE-2024-36032?

CVE-2024-36032 is a High severity Linux kernel vulnerability with a CVSS score of 7.1 out of 10, affecting Linux kernel versions from 5.12 onward and patched in 5.15.162, 6.1.91, 6.6.31 and others. CVE-2024-36032 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-36032?

CVE-2024-36032 has a CVSS score of 7.1 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

Is there a patch available for CVE-2024-36032?

Yes, CVE-2024-36032 has been patched. Fixed versions include 5.15.162, 6.1.91, 6.6.31 and others. If you are running Linux kernel 5.12 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-36032 actively exploited?

CVE-2024-36032 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-36032

High

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix info leak when fetching fw build id Add the missing sanity checks and move the 255-byte build-id buffer off the stack to avoid leaking stack data through debugfs in case the build-info reply is malformed.

Package Linux Kernel

Published 2024-05-30

Last modified 2025-09-18

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.1

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness type

CWE-668

CVE-2024-36032 is classified as CWE-668

See CWE-668 on MITRE CWE for full details on this weakness type.

Affected versions

Linux kernel versions 5.12 and later are affected. Fixed in 5.15.162, 6.1.91, 6.6.31, 6.8.10, 6.9 and their respective stable series.

Affected from

≥ 5.12

Fixed in

✓ 5.15.162 5.15.x ✓ 6.1.91 6.1.x ✓ 6.6.31 6.6.x ✓ 6.8.10 6.8.x ✓ 6.9

References

5 total

Kernel Git
https://git.kernel.org/stable/c/57062aa13e87b1a78a4a8f6cb5fab6ba24f5f488

Patch
Kernel Git
https://git.kernel.org/stable/c/62d5550ab62042dcceaf18844d0feadbb962cffe

Patch
Kernel Git
https://git.kernel.org/stable/c/6b63e0ef4d3ce0080395e5091fba2023f246c45a

Patch
Kernel Git
https://git.kernel.org/stable/c/a571044cc0a0c944e7c12237b6768aeedd7480e1

Patch
Kernel Git
https://git.kernel.org/stable/c/cda0d6a198e2a7ec6f176c36173a57bdd8af7af2

Patch

Details

CVE ID CVE-2024-36032

Severity High

CVSS score 7.1 / 10

CVSS version 3.1

Published 2024-05-30

Modified 2025-09-18

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-36032?

CVE-2024-36032 is a High severity Linux kernel vulnerability with a CVSS score of 7.1 out of 10 . It affects Linux kernel versions from 5.12 onward and has been patched in 5.15.162, 6.1.91, 6.6.31 and others. CVE-2024-36032 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-36032?

CVE-2024-36032 has a CVSS score of 7.1 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.
Is there a patch available for CVE-2024-36032?

Yes. CVE-2024-36032 has been patched. Fixed versions include 5.15.162, 6.1.91, 6.6.31 and others. If you are running Linux kernel 5.12 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-36032 actively exploited?

No. CVE-2024-36032 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.