CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: afbluetooth: Fix deadlock
Attemting to do socklock on .recvmsg may cause a deadlock as shown bellow, so instead of using socksock this uses skreceivequeue.lock on btsockioctl to avoid the UAF:
INFO: task kworker/u9:1:121 blocked for more than 30 seconds. Not tainted 6.7.6-lemon #183 Workqueue: hci0 hcirxwork Call Trace: <TASK> schedule+0x37d/0xa00 schedule+0x32/0xe0 locksock+0x68/0xa0 ? pfxautoremovewakefunction+0x10/0x10 locksocknested+0x43/0x50 l2capsockrecvcb+0x21/0xa0 l2caprecvframe+0x55b/0x30a0 ? psitaskswitch+0xeb/0x270 ? finishtaskswitch.isra.0+0x93/0x2a0 hcirxwork+0x33a/0x3f0 processonework+0x13a/0x2f0 workerthread+0x2f0/0x410 ? pfxworkerthread+0x10/0x10 kthread+0xe0/0x110 ? pfxkthread+0x10/0x10 retfromfork+0x2c/0x50 ? pfxkthread+0x10/0x10 retfromforkasm+0x1b/0x30 </TASK>
Other sources
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: afbluetooth: Fix deadlock
The Linux kernel CVE team has assigned CVE-2024-26886 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041742-CVE-2024-26886-6345@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26886?
CVE-2024-26886 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26886?
To mitigate CVE-2024-26886, update the kernel to version 6.1.83, 6.6.23, 6.7.11, 6.8.2, or 6.9 for Red Hat, or the specified versions for Debian.
What impact does CVE-2024-26886 have on Linux systems?
CVE-2024-26886 can potentially lead to a deadlock when using the Bluetooth socket, affecting system stability.
Is CVE-2024-26886 present in all versions of the Linux kernel?
CVE-2024-26886 affects specific versions of the Linux kernel, primarily those prior to the patched releases.
Who is affected by CVE-2024-26886?
Users running affected versions of the Linux kernel on their systems are at risk for CVE-2024-26886.