IM
IronMonkey Threat Research

CVE-2024-24858 MEDIUM

Published: 2024-02-05 | Last Modified: 2026-05-12 | Status: Modified

Description

A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service.

Additional Descriptions (1)

Se encontró una condición de ejecución en la red/bluetooth del kernel de Linux en la función {conn,adv}_{min,max}_interval_set(). Esto puede provocar una conexión I2cap o un problema de anomalía en la transmisión, lo que posiblemente provoque una denegación de servicio.

CVSS Metrics

Base Score: 5.3 (MEDIUM)

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorADJACENT_NETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.6

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-362
[email protected] Primary
en CWE-362

Affected Products

Vendor Product Version Update Type
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd34b8dac80> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340ad7e40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd348ef39c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340ad4f80> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd34b8d9000> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*

References