CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.32 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8.11 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.2 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch CVE-2024-36968 - Configuration
Implement the missing validation in read_buffer_size() used by l2cap_le_flowctl_init() and make read_buffer_size() return an error value if the validation fails, to prevent div-by-zero and integer overflow when MTU values are out of range.
Linux kernel Bluetooth L2CAP (net/bluetooth/l2cap_core.c: l2cap_le_flowctl_init/read_buffer_size) Add missing validation in read_buffer_size() and return an error value when validation fails = error value on validation failure - Configuration
Update the Bluetooth stack so MTU is moved from hci_dev to hci_conn, validate MTU during hci_conn_add(), and stop the connection process earlier if MTU is invalid (hci_conn_add() returns ERR_PTR()).
Linux kernel Bluetooth HCI connection management (hci_conn_add()/MTU handling) Move MTU from hci_dev to hci_conn to validate MTU and stop the connection earlier if MTU is invalid = MTU validated in hci_conn instead of hci_dev; stop connection earlier on invalid MTU
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36968?
CVE-2024-36968 is classified as a critical vulnerability due to the potential for a div-by-zero and integer overflow affecting system stability.
How do I fix CVE-2024-36968?
To mitigate CVE-2024-36968, update your Linux kernel to version 6.12.12-1 or later.
Which Linux kernel versions are affected by CVE-2024-36968?
CVE-2024-36968 affects Linux kernel versions from 2.6.39 up to 6.6.32 and from 6.7 to 6.8.11.
What type of systems are impacted by CVE-2024-36968?
CVE-2024-36968 impacts systems running vulnerable versions of the Linux kernel, particularly those using Bluetooth functionalities.
Is CVE-2024-36968 related to Bluetooth functionality?
Yes, CVE-2024-36968 specifically relates to vulnerabilities in the Bluetooth L2CAP layer of the Linux kernel.