CVE-2024-26959: Bluetooth: btnxpuart: Fix btnxpuart_close
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btnxpuart: Fix btnxpuartclose
Fix scheduling while atomic BUG in btnxpuartclose(), properly purge the transmit queue and free the receive skb.
[ 10.973809] BUG: scheduling while atomic: kworker/u9:0/80/0x00000002 ... [ 10.980740] CPU: 3 PID: 80 Comm: kworker/u9:0 Not tainted 6.8.0-rc7-0.0.0-devel-00005-g61fdfceacf09 #1 [ 10.980751] Hardware name: Toradex Verdin AM62 WB on Dahlia Board (DT) [ 10.980760] Workqueue: hci0 hcipoweroff [bluetooth] [ 10.981169] Call trace: ... [ 10.981363] uartupdatemctrl+0x58/0x78 [ 10.981373] uartdtrrts+0x104/0x114 [ 10.981381] ttyportshutdown+0xd4/0xdc [ 10.981396] ttyportclose+0x40/0xbc [ 10.981407] uartclose+0x34/0x9c [ 10.981414] ttyportclose+0x50/0x94 [ 10.981430] serdevdeviceclose+0x40/0x50 [ 10.981442] btnxpuartclose+0x24/0x98 [btnxpuart] [ 10.981469] hcidevclosesync+0x2d8/0x718 [bluetooth] [ 10.981728] hcidevdoclose+0x2c/0x70 [bluetooth] [ 10.981862] hcipoweroff+0x20/0x64 [bluetooth]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26959?
CVE-2024-26959 has a severity rating that indicates a potential impact on system stability due to scheduling errors in the Bluetooth subsystem.
How do I fix CVE-2024-26959?
To fix CVE-2024-26959, upgrade to the patched Linux kernel versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which versions of the Linux kernel are affected by CVE-2024-26959?
CVE-2024-26959 affects the Linux kernel versions prior to 5.10.223-1, 5.10.226-1, 6.1.119-1, and others listed in the remediation details.
What functionality is impacted by CVE-2024-26959?
CVE-2024-26959 impacts the Bluetooth functionality related to btnxpuart operations, specifically during the close operation.
Is there a workaround for CVE-2024-26959 if I cannot upgrade?
There is no official workaround for CVE-2024-26959; upgrading to a secure kernel version is recommended.