In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Fix multiple init when debugfs is disabled
If bt_debugfs is not created successfully, which happens if either CONFIG_DEBUG_FS or CONFIG_DEBUG_FS_ALLOW_ALL is unset, then iso_init() returns early and does not set iso_inited to true. This means that a subsequent call to iso_init() will result in duplicate calls to proto_register(), bt_sock_register(), etc.
With CONFIG_LIST_HARDENED and CONFIG_BUG_ON_DATA_CORRUPTION enabled, the duplicate call to proto_register() triggers this BUG():
list_add double add: new=ffffffffc0b280d0, prev=ffffffffbab56250, next=ffffffffc0b280d0. ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:35! Oops: invalid opcode: 0000 [#1] PREEMPT SMP PTI CPU: 2 PID: 887 Comm: bluetoothd Not tainted 6.10.11-1-ao-desktop #1 RIP: 0010:__list_add_valid_or_report+0x9a/0xa0 ... __list_add_valid_or_report+0x9a/0xa0 proto_register+0x2b5/0x340 iso_init+0x23/0x150 [bluetooth] set_iso_socket_func+0x68/0x1b0 [bluetooth] kmem_cache_free+0x308/0x330 hci_sock_sendmsg+0x990/0x9e0 [bluetooth] __sock_sendmsg+0x7b/0x80 sock_write_iter+0x9a/0x110 do_iter_readv_writev+0x11d/0x220 vfs_writev+0x180/0x3e0 do_writev+0xca/0x100 ...
This change removes the early return. The check for iso_debugfs being NULL was unnecessary, it is always NULL when iso_inited is false.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Oct 29, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-56-genericUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64k | Feb 20, 2025 | Oct 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Oct 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub