Critical Memory Access Vulnerability in Linux Kernel Bluetooth Package
Summary
CVE-2024-56590: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet This fixes not checking if skb really contains an ACL header otherwise the code m... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports a wide range of functionalities, including process management, memory management, and device control. The Bluetooth subsystem within the kernel facilitates wireless communication between devices. However, it has been identified that the hci_core component of the Bluetooth subsystem is susceptible to a vulnerability that could lead to unauthorized memory access, potentially compromising system stability and security.
Vulnerability Detail
In the Linux kernel, specifically within the Bluetooth subsystem, a vulnerability was discovered in the hci_core component. This issue arises from the failure to check the length of the socket buffer (skb) when processing an ACL data packet. If the skb does not contain a valid ACL header, the code may attempt to access uninitialized or invalid memory beyond the valid skb->data. This could lead to unpredictable behavior, including system crashes or exploitation by malicious actors to execute arbitrary code.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. Users are advised to apply the patch as soon as it is available to ensure system security.
Conclusion
The CVE-2024-56590 vulnerability in the Linux kernel's Bluetooth subsystem poses significant risks due to improper validation of socket buffer lengths. Users are strongly encouraged to update their systems to the latest patched versions to safeguard against potential exploitation. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2024-56590 is a vulnerability in the Linux kernel's Bluetooth subsystem that allows for potential unauthorized memory access due to improper validation of socket buffer length.
You can use Vulert, which monitors open-source vulnerabilities in your software. By simply using a manifest file like package-lock.json, Vulert can alert you in real-time. You can also check your application using the Vulert playground at Vulert Scanner without any signup.
The risks include system crashes, data corruption, and potential exploitation by attackers to execute arbitrary code, leading to a compromise of system integrity.
Yes, patches are available for Debian-based systems. Users should update their Linux kernel to versions 6.1.123-1 or 6.12.5-1, depending on their Debian version.
While there are no specific workarounds, it is crucial to prioritize updating your system to mitigate the risks associated with this vulnerability as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
