What is the severity of CVE-2024-24860?

CVE-2024-24860 is considered a high severity vulnerability due to its potential to cause kernel panic and denial of service.

How do I fix CVE-2024-24860?

To fix CVE-2024-24860, update the Linux kernel to one of the patched versions listed in the vulnerability details.

What systems are affected by CVE-2024-24860?

CVE-2024-24860 affects various versions of the Linux kernel, particularly those prior to version 5.10.223-1 and those in specific version ranges.

What impact does CVE-2024-24860 have on Linux systems?

CVE-2024-24860 can lead to a null pointer dereference, resulting in system instability and potential service interruptions.

Is CVE-2024-24860 exploited in the wild?

As of now, there is no public indication that CVE-2024-24860 is being actively exploited in the wild, but it poses a significant risk.

Vulnerability/
CVE-2024-24860

medium

5.3

CWE

476 362

EPSS

0.044%

5/2/2024

21/11/2024

CVE-2024-24860: Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()

First published: Mon Feb 05 2024(Updated: )

A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

Credit: security@openanolis.org security@openanolis.org

Affected Software	Affected Version	How to fix
debian/linux		5.10.223-1 5.10.226-1 6.1.123-1 6.1.119-1 6.12.10-1
Linux Kernel	<=5.5.19
Linux Kernel	>=6.0<=6.7.2

Remedy

https://github.com/torvalds/linux/commit/da9065caa594d https://github.com/torvalds/linux/commit/da9065caa594d

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-24860?
CVE-2024-24860 is considered a high severity vulnerability due to its potential to cause kernel panic and denial of service.
How do I fix CVE-2024-24860?
To fix CVE-2024-24860, update the Linux kernel to one of the patched versions listed in the vulnerability details.
What systems are affected by CVE-2024-24860?
CVE-2024-24860 affects various versions of the Linux kernel, particularly those prior to version 5.10.223-1 and those in specific version ranges.
What impact does CVE-2024-24860 have on Linux systems?
CVE-2024-24860 can lead to a null pointer dereference, resulting in system instability and potential service interruptions.
Is CVE-2024-24860 exploited in the wild?
As of now, there is no public indication that CVE-2024-24860 is being actively exploited in the wild, but it poses a significant risk.

agent/title
agent/type
agent/severity
agent/remedy
agent/first-publish-date
agent/author
collector/launchpad-cve
source/Launchpad
collector/epss-latest
source/FIRST
agent/epss
agent/weakness
collector/mitre-cve
source/MITRE
collector/usn-cve
source/Ubuntu
agent/description
agent/event
agent/last-modified-date
agent/references
agent/trending
agent/source
agent/tags
collector/security-tracker-debian
source/Debian
agent/software-canonical-lookup
agent/softwarecombine
collector/nvd-api
source/NVD
agent/software-canonical-lookup-request
collector/nvd-cve
package-manager/debian
vendor/linux
canonical/linux kernel
version/linux kernel/5.5.19
version/linux kernel/6.0
version/linux kernel/6.7.2

Frequently Asked Questions

What is the severity of CVE-2024-24860?
CVE-2024-24860 is considered a high severity vulnerability due to its potential to cause kernel panic and denial of service.
How do I fix CVE-2024-24860?
To fix CVE-2024-24860, update the Linux kernel to one of the patched versions listed in the vulnerability details.
What systems are affected by CVE-2024-24860?
CVE-2024-24860 affects various versions of the Linux kernel, particularly those prior to version 5.10.223-1 and those in specific version ranges.
What impact does CVE-2024-24860 have on Linux systems?
CVE-2024-24860 can lead to a null pointer dereference, resulting in system instability and potential service interruptions.
Is CVE-2024-24860 exploited in the wild?
As of now, there is no public indication that CVE-2024-24860 is being actively exploited in the wild, but it poses a significant risk.

CVE-2024-24860: Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()

Remedy

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-24860?

How do I fix CVE-2024-24860?

What systems are affected by CVE-2024-24860?

What impact does CVE-2024-24860 have on Linux systems?

Is CVE-2024-24860 exploited in the wild?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2024-24860?

How do I fix CVE-2024-24860?

What systems are affected by CVE-2024-24860?

What impact does CVE-2024-24860 have on Linux systems?

Is CVE-2024-24860 exploited in the wild?