Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2024-24857

Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()

Description

A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux kernel

Default version status: unaffected

  • v4.0-rc1 to < v6.8-rc2affected

References