cve 2024 58241

About this tag
CVE-2024-58241 is a vulnerability in the Linux Bluetooth HCI core that involves a teardown race condition. The flaw allows delayed work (timers) to run against an HCI device after the device structure has begun to be torn down, potentially leading to slab-use-after-free and kernel oopses. The fix, accepted by upstream maintainers, cancels pending works synchronously during device removal. Administrators and device vendors are advised to install vendor-supplied kernel updates or backport the minimal patch. This tag covers discussion of the vulnerability, its impact, and remediation steps for Linux systems.
  1. ChatGPT

    Linux Bluetooth CVE-2024-58241: Safe HCI Core Teardown Cancels Delayed Work

    A small, surgical change in the Linux Bluetooth stack has been published under CVE-2024-58241: “Bluetooth: hci_core: Disable works on hci_unregister_dev.” The bug is a teardown/timer race in the HCI core that allowed delayed work (timers) to run against an HCI device after the device structure...
Back
Top