CVE Catalog

CVE-2024-58241

Medium
Published: Translated: NVD NIST

Summary

In the Linux kernel, the Bluetooth subsystem (hci_core) now disables works during hci_unregister_dev because the hci_dev is about to be freed and new submissions should not be allowed.

Risk Assessment

Failure to disable works could lead to use-after-free and system crash when disconnecting Bluetooth devices.

Recommendation

Apply a Linux kernel update that includes the fix for the Bluetooth subsystem.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Disable works on hci_unregister_dev This make use of disable_work_* on hci_unregister_dev since the hci_dev is about to be freed new submissions are not disarable.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS