In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_codec: Fix leaking content of local_codecs
The following memory leak can be observed when the controller supports codecs which are stored in local_codecs list but the elements are never freed:
unreferenced object 0xffff88800221d840 (size 32): comm "kworker/u3:0", pid 36, jiffies 4294898739 (age 127.060s) hex dump (first 32 bytes): f8 d3 02 03 80 88 ff ff 80 d8 21 02 80 88 ff ff ..........!..... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffffb324f557>] __kmalloc+0x47/0x120 [<ffffffffb39ef37d>] hci_codec_list_add.isra.0+0x2d/0x160 [<ffffffffb39ef643>] hci_read_codec_capabilities+0x183/0x270 [<ffffffffb39ef9ab>] hci_read_supported_codecs+0x1bb/0x2d0 [<ffffffffb39f162e>] hci_read_local_codecs_sync+0x3e/0x60 [<ffffffffb39ff1b3>] hci_dev_open_sync+0x943/0x11e0 [<ffffffffb396d55d>] hci_power_on+0x10d/0x3f0 [<ffffffffb30c99b4>] process_one_work+0x404/0x800 [<ffffffffb30ca134>] worker_thread+0x374/0x670 [<ffffffffb30d9108>] kthread+0x188/0x1c0 [<ffffffffb304db6b>] ret_from_fork+0x2b/0x50 [<ffffffffb300206a>] ret_from_fork_asm+0x1a/0x30
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 25, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade dtb-socionextUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade dtb-amazonUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-64kb | Apr 18, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-oem-6.5Upgrade linux-lowlatencyUpgrade linux-lowlatency-hwe-6.5Upgrade linux-raspiUpgrade linux-starfiveUpgrade linux-riscvUpgrade linux-oracle-6.5Upgrade linux-hwe-6.5Upgrade linux-gcp-6.5Upgrade linuxUpgrade linux-awsUpgrade linux-oracleUpgrade linux-nvidia-6.5Upgrade linux-laptopUpgrade linux-gcp | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub