Link Following Vulnerability in Realtek Bluetooth HCI Adaptor
CVE-2024-11857

8.5HIGH

Key Information:

Vendor

Realtek

Status
Bluetooth Hci Adaptor
Vendor
CVE Published:
2 June 2025

What is CVE-2024-11857?

The Bluetooth HCI Adaptor from Realtek is susceptible to a Link Following vulnerability, enabling local attackers with standard privileges to exploit symbolic links. By creating a symbolic link that mirrors a critical file name, attackers can trigger the deletion of arbitrary files referenced by this link. This unauthorized deletion can ultimately lead to significant security breaches as it opens avenues for privilege escalation, posing a substantial risk to the integrity of the device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Bluetooth HCI Adaptor 0 < 1.1.73.1

References

https://www.twcert.org.tw/tw/cp-132-10160-76012-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10161-fa1b5-2.html
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Crispr Xiang
JSON
.