CVE-2024-42141: Bluetooth: ISO: Check socket flag instead of hcon
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Check socket flag instead of hcon
This fixes the following Smatch static checker warning:
net/bluetooth/iso.c:1364 isosockrecvmsg() error: we previously assumed 'pi->conn->hcon' could be null (line 1359)
net/bluetooth/iso.c 1347 static int isosockrecvmsg(struct socket sock, struct msghdr msg, 1348 sizet len, int flags) 1349 { 1350 struct sock sk = sock->sk; 1351 struct isopinfo pi = isopi(sk); 1352 1353 BTDBG("sk %p", sk); 1354 1355 if (testandclearbit(BTSKDEFERSETUP, &btsk(sk)->flags)) { 1356 locksock(sk); 1357 switch (sk->skstate) { 1358 case BTCONNECT2: 1359 if (pi->conn->hcon && ^^^^^^^^^^^^^^ If ->hcon is NULL
1360 testbit(HCICONNPASYNC, &pi->conn->hcon->flags)) { 1361 isoconnbigsync(sk); 1362 sk->skstate = BTLISTEN; 1363 } else { --> 1364 isoconndeferaccept(pi->conn->hcon); ^^^^^^^^^^^^^^ then we're toast
1365 sk->skstate = BTCONFIG; 1366 } 1367 releasesock(sk); 1368 return 0; 1369 case BTCONNECTED: 1370 if (testbit(BTSKPASYNC,
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42141?
CVE-2024-42141 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-42141?
To resolve CVE-2024-42141, upgrade the Linux kernel to version 6.6.39, 6.9.9, or 6.10, or apply equivalent patches from your Linux distribution.
Which versions of the Linux kernel are affected by CVE-2024-42141?
CVE-2024-42141 affects multiple versions of the Linux kernel, particularly those between 6.5.12 and 6.6.39, as well as 6.9.9 and earlier versions.
What components of the Linux kernel are impacted by CVE-2024-42141?
CVE-2024-42141 impacts the Bluetooth ISO module of the Linux kernel, specifically related to socket handling.
When was CVE-2024-42141 disclosed?
CVE-2024-42141 was disclosed as part of Linux kernel updates that addressed various security vulnerabilities.