In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: msft: fix slab-use-after-free in msft_do_close()
Tying the msft->data lifetime to hdev by freeing it in hci_release_dev() to fix the following case:
[use] msft_do_close() msft = hdev->msft_data; if (!msft) ...(1) <- passed. return; mutex_lock(&msft->filter_lock); ...(4) <- used after freed.
[free] msft_unregister() msft = hdev->msft_data; hdev->msft_data = NULL; ...(2) kfree(msft); ...(3) <- msft is freed.
================================================================== BUG: KASAN: slab-use-after-free in __mutex_lock_common kernel/locking/mutex.c:587 [inline] BUG: KASAN: slab-use-after-free in __mutex_lock+0x8f/0xc30 kernel/locking/mutex.c:752 Read of size 8 at addr ffff888106cbbca8 by task kworker/u5:2/309
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 23, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | May 23, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade dtb-apmUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rt | Jun 13, 2024 | May 23, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-oem-24.04a | Aug 9, 2024 | May 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub