PT-2024-4113 · Linux+7 · Linux Kernel+7
Luiz Augusto Von Dentz
+1
·
Published
2024-05-14
·
Updated
2026-03-14
·
CVE-2024-36968
CVSS v3.1
6.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The issue is related to a div-by-zero and integer overflow vulnerability in the
l2cap le flowctl init() function. This vulnerability can be caused by an invalid hdev->le mtu value. To fix this, the MTU is moved from hci dev to hci conn to validate it and stop the connection process earlier if it is invalid. Additionally, a missing validation in read buffer size() is added to return an error value if the validation fails. The hci conn add() function now returns ERR PTR() as it can fail due to a kzalloc failure or an invalid MTU value.Recommendations
To resolve the issue, update the Linux kernel to version 6.6.37 or later. As a temporary workaround, consider disabling the
l2cap le flowctl init() function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the hdev->le mtu parameter in the affected API endpoint until the issue is resolved.Exploit
Fix
DoS
RCE
Integer Overflow
Divide By Zero
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu