hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade perfUpgrade libperfUpgrade kernel-modulesUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-uki-virtUpgrade kernel-rt-develUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-64kUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headers | May 31, 2024 | Mar 31, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Mar 28, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 23, 2024 | Mar 31, 2023 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfo | Jun 17, 2024 | Mar 31, 2023 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kernel-debugUpgrade kernel-rt-develUpgrade dtb-appleUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-vanillaUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade kernel-debug-baseUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade dtb-zteUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-livepatch-develUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-rt-livepatchUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-baseUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdump-manUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-alUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-vanilla-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade ocfs2-kmp-64kb | Apr 11, 2023 | Mar 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub