Bluetooth NULL Pointer Dereference Vulnerability in Linux Package
Summary
DEBIAN-CVE-2024-35850: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NULL-deref on non-serdev setup Qualcomm ROME controllers can be registered from the Bluetooth line discipline and in this case the H... Affects linux versions < 6.8.9-1. Fixed in 6.8.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing the essential kernel that manages system resources and hardware interactions. It supports a wide range of functionalities, including process management, memory management, and device control. This vulnerability specifically affects the Bluetooth subsystem, which facilitates wireless communication between devices. The issue arises from a lack of proper checks when handling Qualcomm ROME controllers, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Bluetooth subsystem related to Qualcomm ROME controllers. When these controllers are registered from the Bluetooth line discipline, the HCI UART serdev pointer may be NULL. This oversight can result in a NULL-pointer dereference when the setup() function is called for a non-serdev controller, leading to potential crashes or undefined behavior in the system. The vulnerability is classified under DEBIAN-CVE-2024-35850 and poses risks to system stability and reliability.
How To Fix
Minimum fixed version
6.8.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users can mitigate risks by ensuring that their systems are updated regularly and by avoiding the use of affected Bluetooth controllers until the patch is applied.
Conclusion
The Bluetooth NULL pointer dereference vulnerability in the Linux package poses significant risks to system stability. Users are strongly encouraged to update to the patched version 6.8.9-1 to mitigate these risks. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a NULL pointer dereference in the Bluetooth subsystem of the Linux kernel, specifically affecting Qualcomm ROME controllers.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If exploited, this vulnerability can lead to system crashes or undefined behavior, impacting the stability and reliability of the operating system.
Yes, a patch has been released in version 6.8.9-1 of the Linux package. Users are advised to update their systems to this version or later.
While there are no specific workarounds, it is advisable to avoid using affected Bluetooth controllers until the patch is applied and to monitor your system for any unusual behavior.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
