PT-2024-29767 · Linux+5 · Linux Kernel+5

Published

2024-06-28

·

Updated

2025-09-29

·

CVE-2024-42141

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The vulnerability is related to the Bluetooth component in the Linux kernel and is caused by incorrect locking. This issue can lead to a denial of service. The vulnerability is resolved by checking the socket flag instead of hcon, which fixes a Smatch static checker warning in the net/bluetooth/iso.c file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476CWE-667

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2025-01418
CVE-2024-42141
INFSA-2024_9315
MGASA-2024-0277
MGASA-2024-0278
RHSA-2024:9315
RHSA-2024_9315
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3383-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu