Bluetooth Device Management Vulnerability in Linux Kernel

CVE-2024-58241

What is CVE-2024-58241?

A vulnerability in Bluetooth device management within the Linux kernel may lead to unhandled device registrations and unregistrations. When using the disable_work_* functions on the hci_unregister_dev procedure, there is a risk that new submissions could occur while the hci_dev is being freed. This can potentially disrupt the normal operations of Bluetooth devices, posing a risk to the overall system stability and security.

References