Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Wren Turkal

#46040of 53,634
5.5Total CVSS
Vulnerabilities · 1
PT-2024-10441
5.5
2024-07-30
Linux · Linux Kernel · CVE-2024-42137
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a use-after-free error in the Linux kernel's Bluetooth component, specifically within the `qca serdev shutdown()` function. This error can cause a denial of service. The problem arises when the `enable-gpios` property is not configured within DT/ACPI for QCA6390, leading to a failure in enabling Bluetooth after a warm reboot. The fix involves sending the VSC to the reset controller within `qca serdev shutdown()` once Bluetooth was ever enabled, ensuring the `serdev` is still opened before it is flushed or wrote. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.