CVE-2024-56654: Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcievent: Fix using rcuread(un)lock while iterating
The usage of rcuread(un)lock while inside listforeachentryrcu is not safe since for the most part entries fetched this way shall be treated as rcudereference:
Note that the value returned by rcudereference() is valid only within the enclosing RCU read-side critical section [1]. For example, the following is not legal::
rcureadlock(); p = rcudereference(head.next); rcureadunlock(); x = p->address; / BUG!!! / rcureadlock(); y = p->data; / BUG!!! / rcureadunlock();
Other sources
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcievent: Fix using rcuread(un)lock while iterating
The usage of rcuread(un)lock while inside listforeachentryrcu is not safe since for the most part entries fetched this way shall be treated as rcudereference:
Note that the value returned by rcudereference() is valid only within the enclosing RCU read-side critical section [1]. For example, the following is not legal::
rcureadlock(); p = rcudereference(head.next); rcureadunlock(); x = p->address; / BUG!!! / rcureadlock(); y = p->data; / BUG!!! / rcureadunlock();
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56654?
The severity of CVE-2024-56654 has not been publicly assigned but it affects the Linux kernel Bluetooth implementation.
How do I fix CVE-2024-56654?
To fix CVE-2024-56654, update your Linux kernel to a version that includes the patch for this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-56654?
CVE-2024-56654 affects Linux kernel versions from 6.4.16 to 6.5, as well as several versions in the 6.5.x and 6.6.x series.
Is there a workaround for CVE-2024-56654?
There are no known workarounds for CVE-2024-56654; updating the kernel is the recommended approach.
What components of the Linux kernel are impacted by CVE-2024-56654?
CVE-2024-56654 specifically impacts the Bluetooth subsystem of the Linux kernel.