Lucene search

K
redhatcveRedhat.comRH:CVE-2024-24858
HistoryFeb 27, 2024 - 11:04 a.m.

CVE-2024-24858

2024-02-2711:04:12
redhat.com
access.redhat.com
17
linux
race condition
bluetooth
denial of service
cve-2024-24858

CVSS3

5.3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.1

Confidence

High

EPSS

0

Percentile

12.7%

A race condition flaw was found in the Linux kernel’s net/bluetooth, specifically in the {conn,adv}_{min,max}_interval_set() function, which may disrupt I2cap connections, possibly causing a denial of service. This flaw allows an attacker to disrupt Bluetooth connections, leading to a potential denial of service.

CVSS3

5.3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.1

Confidence

High

EPSS

0

Percentile

12.7%