CVE-2024-24858: Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}{min,max}intervalset() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24858?
CVE-2024-24858 is classified as a denial of service vulnerability due to a race condition in the Linux kernel.
How do I fix CVE-2024-24858?
To mitigate CVE-2024-24858, update your Linux kernel to versions 5.10.223-1, 6.1.123-1, or higher that are not affected by this vulnerability.
What systems are affected by CVE-2024-24858?
CVE-2024-24858 affects various versions of the Linux kernel including versions up to 3.19.8 and specific versions between 6.0 and 6.7.2.
What are the potential impacts of CVE-2024-24858?
Exploitation of CVE-2024-24858 can lead to I2cap connection disruptions or broadcast abnormalities, potentially resulting in denial of service.
Is there a workaround for CVE-2024-24858?
Currently, the best practice for CVE-2024-24858 is to apply the latest kernel updates as there are no specific workarounds available.