CVE-2024-42132CWE-763

CVE-2024-42132

High · published July 30, 2024

CVSS v3.1
7.6
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX

Syzbot hit warning in hci_conn_del() caused by freeing handle that was

not allocated using ida allocator.

This is caused by handle bigger than HCI_CONN_HANDLE_MAX passed by

hci_le_big_sync_established_evt(), which makes code think it's unset

connection.

Add same check for handle upper bound as in hci_conn_set_handle() to

prevent warning.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-763 · Release of Invalid Pointer or Reference
Published
2024-07-30T12:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 6.5.12, < 6.66.6
linux/linux_kernel≥ 6.6.2, < 6.6.396.6.39
linux/linux_kernel≥ 6.7, < 6.9.96.9.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
EPSS history
Timeline
  • 30 JUL 07:46Z
    bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
    cvelistv5