Critical Slab-Use-After-Free Vulnerability in Linux Kernel Bluetooth Management
Summary
CVE-2024-58013: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes the following crash: ==========================================... Affects linux versions < 6.1.129-1. Fixed in 6.1.129-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management, process control, and system security. It supports a wide range of functionalities, including networking, file systems, and device drivers. The Bluetooth subsystem within the kernel facilitates wireless communication between devices. This vulnerability specifically affects the Bluetooth management layer, which is responsible for managing Bluetooth connections and services.
Vulnerability Detail
The vulnerability, identified as CVE-2024-58013, is a slab-use-after-free issue in the Bluetooth management code. It occurs in the function mgmt_remove_adv_monitor_sync, where a freed memory region is accessed, potentially leading to a crash or arbitrary code execution. The vulnerability arises from improper memory management, where a pointer to a freed object is still being used. This can result in a denial of service or exploitation by an attacker to execute arbitrary code in the context of the kernel, posing significant security risks.
How To Fix
Minimum fixed version
6.1.129-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. It is strongly recommended to apply the patch as soon as it becomes available to mitigate the risks associated with this issue.
Conclusion
The CVE-2024-58013 vulnerability in the Linux kernel's Bluetooth management code poses significant risks, including potential system crashes and arbitrary code execution. Users are urged to update their systems promptly to mitigate these risks. Utilizing tools like Vulert can help in monitoring and identifying vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
CVE-2024-58013 is a vulnerability in the Linux kernel's Bluetooth management code that can lead to a slab-use-after-free condition, potentially allowing an attacker to execute arbitrary code.
If exploited, this vulnerability can cause system crashes or allow attackers to execute malicious code, compromising the security and stability of your system.
The vulnerability affects all versions of the Linux kernel that include the Bluetooth management code. Users of Debian 11, 12, and 13 should check for updates.
You can use Vulert, a tool that monitors open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
While there are no specific workarounds, it is crucial to monitor your system for any unusual activity and apply the patch as soon as it is available.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
