In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
rfcomm_sk_state_change attempts to use sock_lock so it must never be called with it locked but rfcomm_sock_ioctl always attempt to lock it causing the following trace:
====================================================== WARNING: possible circular locking dependency detected 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted ------------------------------------------------------ syz-executor386/5093 is trying to acquire lock: ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1671 [inline] ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 net/bluetooth/rfcomm/sock.c:73
but task is already holding lock: ffff88807badfd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 net/bluetooth/rfcomm/core.c:491
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-56-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04bUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1140-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-24.04 | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub