High · published December 17, 2024
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4
("Bluetooth: Always request for user confirmation for Just Works")
always request user confirmation with confirm_hint set since the
likes of bluetoothd have dedicated policy around JUST_WORKS method
(e.g. main.conf:JustWorksRepairing).
CVE: CVE-2024-8805
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 3.2.61, < 3.3 | 3.3 |
| linux/linux_kernel | ≥ 3.4.98, < 3.5 | 3.5 |
| linux/linux_kernel | ≥ 3.10.48, < 3.11 | 3.11 |
| linux/linux_kernel | ≥ 3.12.25, < 3.13 | 3.13 |
| linux/linux_kernel | ≥ 3.14.12, < 3.15 | 3.15 |
| linux/linux_kernel | ≥ 3.15.5, < 3.16 | 3.16 |
| linux/linux_kernel | ≥ 3.16.1, < 5.10.236 | 5.10.236 |
| linux/linux_kernel | ≥ 5.11, < 5.15.180 | 5.15.180 |
| linux/linux_kernel | ≥ 5.16, < 6.1.113 | 6.1.113 |
| linux/linux_kernel | ≥ 6.2, < 6.6.55 | 6.6.55 |
| linux/linux_kernel | ≥ 6.7, < 6.10.14 | 6.10.14 |
| linux/linux_kernel | ≥ 6.11, < 6.11.3 | 6.11.3 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |