SECUFOCUSNOW
Home›CVE index›CVE-2024-36012
Review reviewHigh

CVE-2024-36012

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do_close() Tying the msft->data lifetime to hdev by freeing it in hci_release_dev() to fix the following case: [use] msft_do_close() msft = hdev->msft_data; if (!msft) ...(1) <- passed. return; mutex_lock(&msft->filter_lock); ...(4) <- used after freed. [free] msft_unregister() msft = hdev->msft_data; hdev->msft_data = NULL; ...(2) kfree(msft); ...(3) <- msft is freed. ================================================================== BUG: KASAN: slab-use-after-free in __mute...

CVSS
7.8
EPSS
0.21%
11.5% percentile
CISA KEV
Not listed
Published
2024.05.23
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.21%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do_close() Tying the msft->data lifetime to hdev by freeing it in hci_release_dev() to fix the following case: [use] msft_do_close() msft = hdev->msft_data; if (!msft) ...(1) <- passed. return; mutex_lock(&msft->filter_lock); ...(4) <- used after freed. [free] msft_unregister() msft = hdev->msft_data; hdev->msft_data = NULL; ...(2) kfree(msft); ...(3) <- msft is freed. ================================================================== BUG: KASAN: slab-use-after-free in __mute...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= bf6a4e30ffbd9e9ef8934582feb937f6532f8b68 < e3880b531b68f98d3941d83f2f6dd11cf4fd6b76, >= bf6a4e30ffbd9e9ef8934582feb937f6532f8b68 < a85a60e62355e3bf4802dead7938966824b23940, >= bf6a4e30ffbd9e9ef8934582feb937f6532f8b68 < 4f1de02de07748da80a8178879bc7a1df37fdf56, >= bf6a4e30ffbd9e9ef8934582feb937f6532f8b68 < 10f9f426ac6e752c8d87bf4346930ba347aaabac, >= 5.12, >= 5.12 < 6.1.91, >= 6.2 < 6.6.31, >= 6.7 < 6.8.10, 6.9
Fixed versions
6.1.91, 6.6.31, 6.8.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416