What is the severity of CVE-2024-21803?

CVE-2024-21803 is classified as a High severity vulnerability due to its potential for local execution of code.

How do I fix CVE-2024-21803?

To resolve CVE-2024-21803, update the Linux kernel to the latest patched version that addresses this issue.

Which versions of Linux kernel are affected by CVE-2024-21803?

CVE-2024-21803 affects Linux kernel versions from 2.6.12.1 up to but not including 6.8.

What type of vulnerability is CVE-2024-21803?

CVE-2024-21803 is a Use After Free vulnerability found in the Bluetooth modules of the Linux kernel.

Is local execution of code possible with CVE-2024-21803?

Yes, CVE-2024-21803 allows for local execution of code, which poses significant security risks.

Vulnerability/
CVE-2024-21803

high

7.8

CWE

416

EPSS

0.042%

30/1/2024

8/2/2024

CVE-2024-21803: Possible UAF in bt_accept_poll in Linux kernel

First published: Tue Jan 30 2024(Updated: )

Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C. This issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.

Credit: security@openanolis.org

Affected Software	Affected Version	How to fix
Linux Kernel	>=2.6.12.1<6.8
Linux Kernel	=2.6.12-rc2
Linux Kernel	=2.6.12-rc3
Linux Kernel	=2.6.12-rc4
Linux Kernel	=2.6.12-rc5
Linux Kernel	=2.6.12-rc6

Never miss a vulnerability like this again

Reference Links

https://bugzilla.openanolis.cn/show_bug.cgi?id=8081

Frequently Asked Questions

What is the severity of CVE-2024-21803?
CVE-2024-21803 is classified as a High severity vulnerability due to its potential for local execution of code.
How do I fix CVE-2024-21803?
To resolve CVE-2024-21803, update the Linux kernel to the latest patched version that addresses this issue.
Which versions of Linux kernel are affected by CVE-2024-21803?
CVE-2024-21803 affects Linux kernel versions from 2.6.12.1 up to but not including 6.8.
What type of vulnerability is CVE-2024-21803?
CVE-2024-21803 is a Use After Free vulnerability found in the Bluetooth modules of the Linux kernel.
Is local execution of code possible with CVE-2024-21803?
Yes, CVE-2024-21803 allows for local execution of code, which poses significant security risks.

collector/mitre-cve
source/MITRE
agent/references
agent/weakness
agent/title
agent/type
agent/description
agent/first-publish-date
agent/author
agent/last-modified-date
agent/severity
agent/softwarecombine
agent/event
collector/epss-latest
source/FIRST
agent/epss
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/linux
canonical/linux kernel
version/linux kernel/2.6.12.1
version/linux kernel/2.6.12-rc2
version/linux kernel/2.6.12-rc3
version/linux kernel/2.6.12-rc4
version/linux kernel/2.6.12-rc5
version/linux kernel/2.6.12-rc6

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2024-21803?
CVE-2024-21803 is classified as a High severity vulnerability due to its potential for local execution of code.
How do I fix CVE-2024-21803?
To resolve CVE-2024-21803, update the Linux kernel to the latest patched version that addresses this issue.
Which versions of Linux kernel are affected by CVE-2024-21803?
CVE-2024-21803 affects Linux kernel versions from 2.6.12.1 up to but not including 6.8.
What type of vulnerability is CVE-2024-21803?
CVE-2024-21803 is a Use After Free vulnerability found in the Bluetooth modules of the Linux kernel.
Is local execution of code possible with CVE-2024-21803?
Yes, CVE-2024-21803 allows for local execution of code, which poses significant security risks.