• CVE-2024-24857

发布时间: 2025年2月8日

修改时间: 2025年2月8日

概要

A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service.

CVSS v3 指标

NVD openEuler
Confidentiality None None
Attack Vector Adjacent Adjacent
CVSS评分 6.8 6.8
Attack Complexity High High
Privileges Required None None
Scope Unchanged Unchanged
Integrity High High
User Interaction None None
Availability High High

安全公告

公告名 概要 发布时间
KylinSec-SA-2024-4337 A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service. 2024年12月9日

影响产品

产品 状态
KY3.4-5 kernel Fixed
KY3.5.3 kernel Fixed
KY3.5.2 kernel Fixed