Link Following Vulnerability in Realtek Bluetooth HCI Adaptor

CVE-2024-11857

What is CVE-2024-11857?

The Bluetooth HCI Adaptor from Realtek is susceptible to a Link Following vulnerability, enabling local attackers with standard privileges to exploit symbolic links. By creating a symbolic link that mirrors a critical file name, attackers can trigger the deletion of arbitrary files referenced by this link. This unauthorized deletion can ultimately lead to significant security breaches as it opens avenues for privilege escalation, posing a substantial risk to the integrity of the device.

References