CVE-2024-56757CWE-404

CVE-2024-56757

High · published January 6, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: mediatek: add intf release flow when usb disconnect

MediaTek claim an special usb intr interface for ISO data transmission.

The interface need to be released before unregistering hci device when

usb disconnect. Removing BT usb dongle without properly releasing the

interface may cause Kernel panic while unregister hci device.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.1th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2025-01-06T22:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.12.86.12.8
References (2)
https://git.kernel.org/stable/c/489304e67087abddc2666c5af0159cb95afdcf59 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cc569d791ab2a0de74f76e470515d25d24c9b84b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 06 JAN 16:20Z
    Bluetooth: btusb: mediatek: add intf release flow when usb disconnect
    cvelistv5