Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-27416

Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.309, 5.4.271, 5.10.212, 5.15.151, 6.1.81, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 4.19.297 · fixed in 4.19.309; From 5.4.259 · fixed in 5.4.271; From 5.10.199 · fixed in 5.10.212; From 5.15.137 · fixed in 5.15.151; From 6.1.60 · fixed in 6.1.81; From 4.14.328 · fixed in 4.15; From 6.5.9 · fixed in 6.6

  • Linux Linux

    6.6

References 8

git.kernel.org