CVE-2024-42132: bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
In the Linux kernel, the following vulnerability has been resolved:
bluetooth/hci: disallow setting handle bigger than HCICONNHANDLEMAX
Syzbot hit warning in hciconndel() caused by freeing handle that was not allocated using ida allocator.
This is caused by handle bigger than HCICONNHANDLEMAX passed by hcilebigsyncestablishedevt(), which makes code think it's unset connection.
Add same check for handle upper bound as in hciconnsethandle() to prevent warning.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.39 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.9 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.22-1 - Configuration
Add/ensure the same check for the handle upper bound (handle > HCI_CONN_HANDLE_MAX) as in hci_conn_set_handle(), specifically in the code path handling hci_le_big_sync_established_evt(), to prevent warnings in hci_conn_del() caused by freeing a handle that was not allocated using the ida allocator.
Linux kernel (Bluetooth HCI) hci_conn_set_handle() / hci_le_big_sync_established_evt() handle upper bound check = Disallow setting handle bigger than HCI_CONN_HANDLE_MAX
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42132?
CVE-2024-42132 has been classified as a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2024-42132?
To fix CVE-2024-42132, you need to upgrade to one of the patched versions of the kernel, such as 6.6.39, 6.9.9, or 6.10.
Which systems are affected by CVE-2024-42132?
CVE-2024-42132 affects various versions of the Linux kernel prior to the patched releases mentioned.
What is the impact of CVE-2024-42132?
The impact of CVE-2024-42132 includes potential instability and undesired behavior in Bluetooth connections due to improper handle management.
Is CVE-2024-42132 fully resolved?
Yes, CVE-2024-42132 has been resolved in the kernel versions mentioned in the vulnerability report.