PT-2025-32442 · Linux+3 · Linux Kernel+3

Published 2023-12-27 · Updated 2026-04-20 · CVE-2024-58238

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: This issue resolves a timeout error occurring in the Bluetooth btnxpuart driver during power save stress testing. The problem arises when the power save mechanism activates UART break concurrently with the scheduling of btnxpuart tx work(). This leads to an incorrect reading of the power state (ps state), preventing the necessary work from being scheduled to disable the UART break. The fix involves implementing a ps lock mutex to synchronize access to UART break control and the ps state variable, ensuring accurate state management and preventing the timeout error.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2025-09671

CVE-2024-58238

ECHO-D099-CC2A-A938

SUSE-SU-2025:03272-1

SUSE-SU-2025:03290-1

SUSE-SU-2025:03301-1

SUSE-SU-2025:03382-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20653-1

SUSE-SU-2025:20669-1

SUSE-SU-2025:20739-1

SUSE-SU-2025:20756-1

SUSE-SU-2025_03272-1

SUSE-SU-2025_03290-1

SUSE-SU-2025_03301-1

SUSE-SU-2025_03382-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1047

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58238.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2024-58238 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58238 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-58238 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2024-58238 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03290-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20669-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58238 · Vendor Advisory
• https://git.kernel.org/stable/c/9d5df94ce0e213d5b549633f528f96114c736190 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03272-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03602-1 · Vendor Advisory
• https://git.kernel.org/stable/c/e4db90e4eb8d5487098712ffb1048f3fa6d25e98 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-58238 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-58238 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03634-1 · Vendor Advisory