hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-develUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64kUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-uki-virtUpgrade libperfUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-tools-libs-devel | May 31, 2024 | Mar 31, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Mar 28, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 23, 2024 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-devel | Jun 17, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-vanilla-baseUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade dtb-zteUpgrade kernel-vanilla-livepatch-develUpgrade kernel-develUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-amdUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade kernel-vanilla-develUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade kernel-preempt-develUpgrade kernel-source-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-debug-baseUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade kernel-preemptUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-xilinx | Apr 11, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub