Linux · Linux Kernel · CVE-2024-26886
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.7.6
**Description**
The issue is related to a deadlock in the Bluetooth module of the Linux kernel. Attempting to do a sock lock on .recvmsg may cause a deadlock. To avoid this, the kernel now uses sk receive queue.lock on bt sock ioctl instead of sock sock. This change prevents a potential Use-After-Free (UAF) condition. The problem was identified when a task was blocked for more than 30 seconds, indicating a deadlock. The call trace shows the sequence of events leading to the deadlock, involving functions such as schedule, schedule, lock sock, and l2cap sock recv cb.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.