Bluetooth Transmission Issue in Linux Kernel by Vendor

CVE-2024-58238

What is CVE-2024-58238?

A vulnerability in the Linux kernel's Bluetooth module related to btnxpuart functionality has been addressed. The issue was identified during stress testing where a transmission timeout occurred that hindered Bluetooth communications. This was due to a race condition involving the power save mechanism, specifically when the UART breaking feature was turned on simultaneously with the transmission work. The resolution introduced a mutex around the power state transitions and UART break commands, ensuring proper synchronization. Testing confirmed that the TX timeout error did not recur after implementing this fix across extensive iterations.

References