CVE-2024-24859— Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-24859
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()
Source: NVD (National Vulnerability Database)
Vulnerability Description
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 竞争条件问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 net/bluetooth 的 sniff_{min,max}_interval_set() 方法存在蓝牙嗅探异常问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Linux | Linux kernel | v4.0-rc1 ~ v6.8-rc2 | - |
II. Public POCs for CVE-2024-24859
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-24859
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-02-05 · 9 CVEs total
| CVE-2024-24864 | 5.3 MEDIUM | Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write() |
| CVE-2024-23196 | 5.3 MEDIUM | Race condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_sync |
| CVE-2024-22386 | 5.3 MEDIUM | Race condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disable |
| CVE-2024-24855 | 5.0 MEDIUM | Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan |
| CVE-2024-24857 | 4.6 MEDIUM | Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set() |
| CVE-2024-24858 | 4.6 MEDIUM | Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interva |
| CVE-2024-24860 | 4.6 MEDIUM | Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set() |
| CVE-2024-24861 | 3.3 LOW | Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency() |
IV. Related Vulnerabilities
Same product: Linux kernel
- CVE-2024-24864
Race condition vulnerability in Linux kernel media/dvb-core - CVE-2024-24857
Race condition vulnerability in Linux kernel bluetooth in co - CVE-2024-24858
Race condition vulnerability in Linux kernel net/bluetooth i - CVE-2024-24860
Race condition vulnerability in Linux kernel bluetooth drive - CVE-2024-24861
Race condition vulnerability in Linux kernel media/xc4000 xc
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2024-24859
No comments yet