CVE-2024-42141: Bluetooth: ISO: Check socket flag instead of hcon
First published: Tue Jul 30 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Check socket flag instead of hcon This fixes the following Smatch static checker warning: net/bluetooth/iso.c:1364 iso_sock_recvmsg() error: we previously assumed 'pi->conn->hcon' could be null (line 1359) net/bluetooth/iso.c 1347 static int iso_sock_recvmsg(struct socket *sock, struct msghdr *msg, 1348 size_t len, int flags) 1349 { 1350 struct sock *sk = sock->sk; 1351 struct iso_pinfo *pi = iso_pi(sk); 1352 1353 BT_DBG("sk %p", sk); 1354 1355 if (test_and_clear_bit(BT_SK_DEFER_SETUP, &bt_sk(sk)->flags)) { 1356 lock_sock(sk); 1357 switch (sk->sk_state) { 1358 case BT_CONNECT2: 1359 if (pi->conn->hcon && ^^^^^^^^^^^^^^ If ->hcon is NULL 1360 test_bit(HCI_CONN_PA_SYNC, &pi->conn->hcon->flags)) { 1361 iso_conn_big_sync(sk); 1362 sk->sk_state = BT_LISTEN; 1363 } else { --> 1364 iso_conn_defer_accept(pi->conn->hcon); ^^^^^^^^^^^^^^ then we're toast 1365 sk->sk_state = BT_CONFIG; 1366 } 1367 release_sock(sk); 1368 return 0; 1369 case BT_CONNECTED: 1370 if (test_bit(BT_SK_PA_SYNC,
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <6.6.39 | 6.6.39 |
| redhat/kernel | <6.9.9 | 6.9.9 |
| redhat/kernel | <6.10 | 6.10 |
| Linux Kernel | >=6.5.12<6.6 | |
| Linux Kernel | >=6.6<6.6.39 | |
| Linux Kernel | >=6.7<6.9.9 | |
| Linux Kernel | =6.10-rc1 | |
| Linux Kernel | =6.10-rc2 | |
| Linux Kernel | =6.10-rc3 | |
| Linux Kernel | =6.10-rc4 | |
| Linux Kernel | =6.10-rc5 | |
| Linux Kernel | =6.10-rc6 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.133-1 6.12.22-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/045669710464a21c67e690ef14698fd71857cb11
- https://git.kernel.org/stable/c/33fabef489169c6db87843ef23351ed0d5e51ad8
- https://git.kernel.org/stable/c/596b6f081336e77764ca35cfeab66d0fcdbe544e
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42141
- https://nvd.nist.gov/vuln/detail/CVE-2024-42141
- https://launchpad.net/bugs/cve/CVE-2024-42141
- https://security-tracker.debian.org/tracker/CVE-2024-42141
- https://ubuntu.com/security/CVE-2024-42141
- https://git.kernel.org/linus/596b6f081336e77764ca35cfeab66d0fcdbe544e
- https://lore.kernel.org/linux-cve-announce/2024073030-CVE-2024-42141-9017@gregkh/T
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2302001
- https://access.redhat.com/errata/RHSA-2024:9315
- https://bugzilla.redhat.com/show_bug.cgi?id=2301506
Frequently Asked Questions
What is the severity of CVE-2024-42141?
CVE-2024-42141 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-42141?
To resolve CVE-2024-42141, upgrade the Linux kernel to version 6.6.39, 6.9.9, or 6.10, or apply equivalent patches from your Linux distribution.
Which versions of the Linux kernel are affected by CVE-2024-42141?
CVE-2024-42141 affects multiple versions of the Linux kernel, particularly those between 6.5.12 and 6.6.39, as well as 6.9.9 and earlier versions.
What components of the Linux kernel are impacted by CVE-2024-42141?
CVE-2024-42141 impacts the Bluetooth ISO module of the Linux kernel, specifically related to socket handling.
When was CVE-2024-42141 disclosed?
CVE-2024-42141 was disclosed as part of Linux kernel updates that addressed various security vulnerabilities.
- agent/title
- agent/type
- agent/first-publish-date
- agent/author
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-42141
- agent/software-canonical-lookup
- agent/references
- agent/severity
- agent/remedy
- agent/weakness
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-api
- agent/softwarecombine
- agent/tags
- collector/security-tracker-debian
- source/Debian
- package-manager/redhat
- vendor/linux
- canonical/linux kernel
- version/linux kernel/6.5.12
- version/linux kernel/6.6
- version/linux kernel/6.7
- version/linux kernel/6.10-rc1
- version/linux kernel/6.10-rc2
- version/linux kernel/6.10-rc3
- version/linux kernel/6.10-rc4
- version/linux kernel/6.10-rc5
- version/linux kernel/6.10-rc6
- package-manager/debian