CVE-2024-26903: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
Bluetooth: rfcomm: Fix null-ptr-deref in rfcommchecksecurity
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.19.311 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.4.273 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.10.214 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.153 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.83 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.23 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7.11 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8 - Compensating control
In rfcomm_process_rx, check whether sk->sk_state is BT_CLOSED before calling rfcomm_recv_frame.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26903?
CVE-2024-26903 is classified as a high severity vulnerability in the Linux kernel affecting Bluetooth RFCOMM.
How do I fix CVE-2024-26903?
To fix CVE-2024-26903, update your Linux kernel to versions 4.19.311, 5.4.273, 5.10.214, 5.15.153, 6.1.83, 6.6.23, 6.7.11, or 6.8 as applicable.
What systems are affected by CVE-2024-26903?
CVE-2024-26903 affects various versions of the Linux kernel across distributions such as Red Hat and Debian.
What component of Linux is impacted by CVE-2024-26903?
CVE-2024-26903 impacts the Bluetooth RFCOMM layer in the Linux kernel.
Is CVE-2024-26903 being actively exploited?
There is no current evidence of active exploitation for CVE-2024-26903, but users are encouraged to apply updates promptly.