CVE-2024-38620

CVE-2024-38620

High · published June 20, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: HCI: Remove HCI_AMP support

Since BT_HS has been remove HCI_AMP controllers no longer has any use so

remove it along with the capability of creating AMP controllers.

Since we no longer need to differentiate between AMP and Primary

controllers, as only HCI_PRIMARY is left, this also remove

hdev->dev_type altogether.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Published
2024-06-20T12:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 4.3, < 6.6.336.6.33
linux/linux_kernel≥ 6.7, < 6.8.126.8.12
linux/linux_kernel≥ 6.9, < 6.9.36.9.3
References (9)
https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9e6cf0eccfe15b67bf9773ecd101162dfdfed5e2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 20 JUN 08:03Z
    Bluetooth: HCI: Remove HCI_AMP support
    cvelistv5