Lucene search

K
redhatcveRedhat.comRH:CVE-2024-24857
HistoryFeb 27, 2024 - 11:03 a.m.

CVE-2024-24857

2024-02-2711:03:58
redhat.com
access.redhat.com
13
cve-2024-24857
integrity overflow
bluetooth connection
denial of service
linux kernel

CVSS3

6.8

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

13.4%

A race condition was found in the Linux kernel’s net/bluetooth device driver within the conn_info_{min,max}_age_set() function. This issue can lead to an integrity overflow issue, potentially disrupting Bluetooth connections or facilitating a denial of service attack.

CVSS3

6.8

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

13.4%