Linux Kernel Bluetooth Vulnerability Affects Realtek USB Dongles

CVE-2024-57987

Summary

A vulnerability in the Linux kernel's Bluetooth implementation related to the Realtek chipset was identified. When a USB dongle with an unrecognized chip ID is inserted, the system will access a NULL pointer, leading to potential instability and crashes. This issue has been addressed by adding a NULL check at the affected function, btrtl_setup_realtek, ensuring a more stable experience when connecting USB devices.

References