In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btusb: mediatek: add intf release flow when usb disconnect
MediaTek claim an special usb intr interface for ISO data transmission. The interface need to be released before unregistering hci device when usb disconnect. Removing BT usb dongle without properly releasing the interface may cause Kernel panic while unregister hci device.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Jan 6, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Jan 6, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1012-oemUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-realtime-hwe-24.04 | Jan 23, 2025 | Jan 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub