Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the CMTP module. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Was ZDI-CAN-11977.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 7, 2024 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 24, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 4, 2024 | Oct 25, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 7, 2024 |
| Suse | — | Upgrade dlm-kmp-preemptUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kselftests-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade kernel-defaultUpgrade kernel-debug-baseUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade kernel-azure-baseUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-vanilla-develUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade gfs2-kmp-preemptUpgrade kernel-ec2Upgrade kernel-preempt-extraUpgrade dtb-alteraUpgrade kernel-ec2-baseUpgrade kernel-default-manUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade dtb-alUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade dtb-zteUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade dtb-exynosUpgrade kernel-xenUpgrade dtb-allwinnerUpgrade cluster-md-kmp-preemptUpgrade dtb-xilinxUpgrade kernel-xen-baseUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-preemptUpgrade kernel-trace-baseUpgrade ocfs2-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-preempt-optionalUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-vanillaUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-default-baseUpgrade kernel-xen-develUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-ec2-develUpgrade dtb-lgUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-trace-develUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade kernel-default-kgraftUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade kernel-vanilla-baseUpgrade kernel-source-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-traceUpgrade kernel-64kbUpgrade kernel-zfcpdump-man | Nov 25, 2021 | Nov 24, 2021 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15Upgrade linux-oem-5.13 | Nov 19, 2024 | May 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub