PT-2025-3604 · Linux+3 · Linux Kernel+3

Published

2024-12-12

·

Updated

2025-10-17

·

CVE-2024-57879

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability has been resolved in the Linux kernel related to Bluetooth. The issue involves the function iso listen bis, where the hdev is not properly released at the end of the function, even if it returns with an error. This is because hci get route holds the device before returning, and the hdev should be released with hci dev put.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-404

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2026-02564
CVE-2024-57879
INFSA-2025_6966
RHSA-2025:6966
RHSA-2025_6966
USN-7379-1
USN-7379-2
USN-7380-1
USN-7381-1
USN-7382-1
USN-7513-1
USN-7513-2
USN-7513-3
USN-7513-4
USN-7513-5
USN-7514-1
USN-7515-1
USN-7515-2
USN-7522-1
USN-7523-1
USN-7524-1

Affected Products

Linuxmint
Linux Kernel
Red Hat
Ubuntu