CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver
Bluetooth: btnxpuart: Fix random crash seen while removing driver
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 4183a7be7700 - Configuration
The crash was highlighted after enabling Power Save by default in commit 4183a7be7700; apply the kernel fix so that ps_cleanup() deasserts the UART break immediately on close, cancels any scheduled ps_work, and destroys the ps_lock mutex.
btnxpuart Bluetooth driver Power Save feature on startup = enabled - Operational
Repeat the driver load/unload procedure (modprobe btnxpuart; hciconfig hci0 reset; check hci0 interface up with valid BD address; modprobe -r btnxpuart) over multiple iterations to verify the random crash on driver removal is resolved.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46680?
CVE-2024-46680 is classified as a moderate severity vulnerability due to the potential for random kernel crashes.
How do I fix CVE-2024-46680?
To fix CVE-2024-46680, update to the latest versions of the Linux kernel that have resolved this issue.
What systems are affected by CVE-2024-46680?
CVE-2024-46680 affects multiple versions of the Linux kernel, particularly those before version 6.12.10.
What type of vulnerability is CVE-2024-46680?
CVE-2024-46680 is a vulnerability in the Bluetooth subsystem of the Linux kernel related to driver management.
Are there known exploits for CVE-2024-46680?
As of now, there are no public exploits reported for CVE-2024-46680.