PT-2024-36898 · Linux +4 · Linux Kernel +4

Published 2024-12-27 · Updated 2025-05-13 · CVE-2024-56591

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

A vulnerability in the Linux kernel has been resolved. The issue is related to the Bluetooth component, specifically in the hci conn module. The fix involves using `disable delayed work sync` instead of `cancel delayed work sync` to not only cancel ongoing work but also disable new submissions. This change is necessary because the object holding the work is about to be freed.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-56591

RHSA-2025:6966

RHSA-2025_6966

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Hat

Ubuntu

References · 1563

• https://safe-surf.ru/specialists/bulletins-nkcki/719539 · Security Note
• https://bdu.fstec.ru/vul/2025-07941 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57935 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/721351 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57838 · Security Note
• https://bdu.fstec.ru/vul/2025-01090 · Security Note
• https://ubuntu.com/security/CVE-2024-56657 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07855 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41935 · Security Note
• https://bdu.fstec.ru/vul/2025-00160 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/716822 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/716808 · Security Note
• https://ubuntu.com/security/CVE-2024-57850 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56575 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21637 · Vendor Advisory