CVE Catalog
CVE-2024-58241
MediumSummary
In the Linux kernel, the Bluetooth subsystem (hci_core) now disables works during hci_unregister_dev because the hci_dev is about to be freed and new submissions should not be allowed.
Risk Assessment
Failure to disable works could lead to use-after-free and system crash when disconnecting Bluetooth devices.
Recommendation
Apply a Linux kernel update that includes the fix for the Bluetooth subsystem.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Disable works on hci_unregister_dev This make use of disable_work_* on hci_unregister_dev since the hci_dev is about to be freed new submissions are not disarable.

