PT-2023-8567 · Linux+5 · Linux Kernel+5

Shiloong + 1 · Published 2023-12-22 · Updated 2025-10-03 · CVE-2024-24860

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition was found in the Linux kernel's bluetooth device driver in the (min,max) key size set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Race Condition

Weakness Enumeration

CWE-476

CWE-362

Related Identifiers

ALT-PU-2024-10855

ALT-PU-2025-12647

AZL-34884

BDU:2024-01196

CVE-2024-24860

DLA-3841-1

OESA-2024-1526

OESA-2024-1535

OESA-2024-1541

OESA-2024-1647

OESA-2024-1648

OESA-2024-1649

OPENSUSE-SU-2024:13696-1

OPENSUSE-SU-2024_0515-1

OPENSUSE-SU-2025:14705-1

OPENSUSE-SU-2025_0201-1

OPENSUSE-SU-2025_0229-1

SUSE-SU-2024:0476-1

SUSE-SU-2024:0514-1

SUSE-SU-2024:0515-1

SUSE-SU-2024:0516-1

SUSE-SU-2025:0201-1

SUSE-SU-2025:0201-2

SUSE-SU-2025:0229-1

SUSE-SU-2025_0201-1

SUSE-SU-2025_0201-2

USN-6688-1

USN-6725-1

USN-6725-2

USN-6765-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

USN-6972-1

USN-6972-2

USN-6972-3

USN-6972-4

USN-6973-1

USN-6973-2

USN-6973-3

USN-6973-4

USN-6976-1

USN-7006-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1307

• 🔥 https://github.com/Notselwyn/CVE-2024-1086 · Exploit
• 🔥 https://github.com/LLfam/CVE-2024-1086 · Exploit
• https://ubuntu.com/security/CVE-2024-26646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26751 · Security Note
• https://ubuntu.com/security/CVE-2024-26591 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40974 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24860 · Security Note
• https://ubuntu.com/security/CVE-2024-41006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26908 · Security Note
• https://ubuntu.com/security/CVE-2024-26584 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26641 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26754 · Security Note
• https://ubuntu.com/security/CVE-2024-41041 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26736 · Security Note