You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2024 58241
About this tag
CVE-2024-58241 is a vulnerability in the Linux Bluetooth HCI core that involves a teardown race condition. The flaw allows delayed work (timers) to run against an HCI device after the device structure has begun to be torn down, potentially leading to slab-use-after-free and kernel oopses. The fix, accepted by upstream maintainers, cancels pending works synchronously during device removal. Administrators and device vendors are advised to install vendor-supplied kernel updates or backport the minimal patch. This tag covers discussion of the vulnerability, its impact, and remediation steps for Linux systems.
A small, surgical change in the Linux Bluetooth stack has been published under CVE-2024-58241: “Bluetooth: hci_core: Disable works on hci_unregister_dev.” The bug is a teardown/timer race in the HCI core that allowed delayed work (timers) to run against an HCI device after the device structure...