In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: af_bluetooth: Fix deadlock
Attemting to do sock_lock on .recvmsg may cause a deadlock as shown bellow, so instead of using sock_sock this uses sk_receive_queue.lock on bt_sock_ioctl to avoid the UAF:
INFO: task kworker/u9:1:121 blocked for more than 30 seconds. Not tainted 6.7.6-lemon #183 Workqueue: hci0 hci_rx_work Call Trace: <TASK> __schedule+0x37d/0xa00 schedule+0x32/0xe0 __lock_sock+0x68/0xa0 ? __pfx_autoremove_wake_function+0x10/0x10 lock_sock_nested+0x43/0x50 l2cap_sock_recv_cb+0x21/0xa0 l2cap_recv_frame+0x55b/0x30a0 ? psi_task_switch+0xeb/0x270 ? finish_task_switch.isra.0+0x93/0x2a0 hci_rx_work+0x33a/0x3f0 process_one_work+0x13a/0x2f0 worker_thread+0x2f0/0x410 ? __pfx_worker_thread+0x10/0x10 kthread+0xe0/0x110 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2c/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade rvUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade perfUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-core | Nov 4, 2024 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 19, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-debug-uki-virtUpgrade libperfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-rt-kvmUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules | Sep 17, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-source-vanilla | Dec 5, 2025 | Sep 12, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-genericUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-intelUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1179-azureUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-117-genericUpgrade linux-image-4.15.0-227-generic | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub