PT-2024-10465 · Linux+5 · Linux Kernel+5
Published
2024-07-30
·
Updated
2025-09-29
·
CVE-2024-42133
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.43
Description
The issue is related to the Bluetooth component in the Linux kernel, where improper input validation can lead to a denial of service. Specifically, the
hci le big sync established evt function needs to ignore too large handle values to prevent erroneous release of ida in hci conn cleanup. This can cause issues when the handle value belongs to the ida id range.Recommendations
To resolve the issue, update to Linux kernel version 6.6.43 or later.
As a temporary workaround, consider restricting access to the Bluetooth functionality until a patch is available.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu