PT-2024-1604 · Linux+5 · Linux Kernel+5

Shiloong + 1 · Published 2024-02-04 · Updated 2025-10-03 · CVE-2024-24859

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition was found in the Linux kernel's net/bluetooth in the sniff {min,max} interval set() function. This can result in a bluetooth sniffing exception issue, possibly leading to denial of service. The issue is related to concurrent access to a resource, which may allow a remote attacker to impact the integrity of protected information and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2024-10855

ALT-PU-2025-12647

AZL-34883

BDU:2024-01195

CVE-2024-24859

INFSA-2024_9315

OESA-2025-1094

OESA-2025-1095

OESA-2025-1096

RHSA-2024:9315

RHSA-2024_9315

USN-6893-1

USN-6893-2

USN-6893-3

USN-6896-1

USN-6896-2

USN-6896-3

USN-6896-4

USN-6896-5

USN-6898-1

USN-6898-2

USN-6898-3

USN-6898-4

USN-6917-1

USN-6918-1

USN-6919-1

USN-6922-1

USN-6922-2

USN-6926-1

USN-6926-2

USN-6926-3

USN-6927-1

USN-6938-1

USN-7019-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Hat

Ubuntu

References · 827

• 🔥 https://github.com/MaherAzzouzi/CVE-2024-26817-amdkfd · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-10135-BIAS · Exploit, Deleted
• https://ubuntu.com/security/CVE-2024-35984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26999 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26817 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56539 · Security Note
• https://ubuntu.com/security/CVE-2024-35954 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27398 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42127 · Vendor Advisory