PT-2024-35654 · Linux+3 · Linux Kernel+3
Kiran K
+1
·
Published
2024-12-27
·
Updated
2026-04-20
·
CVE-2024-53207
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0-2024-03-19-intel-next-iLS-24ww14
Description
The issue is related to possible deadlocks in the Bluetooth management (MGMT) component of the Linux kernel, caused by the
hci cmd sync dequeue function. This can lead to a task being blocked for more than 120 seconds. The problem is associated with the mgmt set connectable complete function and the hci cmd sync work workqueue.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the deadlock issue.
As a temporary workaround, consider disabling the Bluetooth functionality until a patch is available.
Restrict access to the Bluetooth management interface to minimize the risk of exploitation.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Red Os
Suse