Bluetooth Memory Leak Vulnerability in Linux Package
Summary
DEBIAN-CVE-2024-26888: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: Fix memory leak Fix leaking buffer allocated to send MSFT_OP_LE_MONITOR_ADVERTISEMENT. Affects linux versions < 6.7.12-1. Fixed in 6.7.12-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It serves as the foundation for various applications and services, ensuring efficient communication between software and hardware. This package is critical for system stability and performance, making it vital to address any vulnerabilities that may arise.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to Bluetooth functionality. Specifically, a memory leak occurs due to improper handling of buffers allocated for sending MSFT_OP_LE_MONITOR_ADVERTISEMENT. This flaw can lead to increased memory consumption over time, potentially resulting in system instability or crashes. The vulnerability is tracked under the identifier DEBIAN-CVE-2024-26888, and it affects both Debian 13 and Debian 14 versions of the Linux package.
How To Fix
Minimum fixed version
6.7.12-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As of now, no specific workarounds have been provided for this vulnerability. Users are encouraged to apply the patch as soon as it becomes available to mitigate the risk.
Conclusion
The Bluetooth memory leak vulnerability in the Linux package is a significant issue that requires immediate attention. Users are strongly advised to update to the patched version 6.7.12-1 to ensure system stability and security. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a memory leak in the Bluetooth functionality of the Linux kernel, which can lead to increased memory usage and potential system instability.
The vulnerability affects Debian 13 and Debian 14 versions of the Linux package.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds available, it is advisable to monitor your system's memory usage and apply the patch as soon as possible.
Detailed information can be found in the Debian CVE database, specifically at the link: https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26888.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
