Critical Bluetooth Vulnerability in Linux Package: UAF in hci_enhanced_setup_sync
Summary
DEBIAN-CVE-2024-50029: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync This checks if the ACL connection remains valid as it could be destroyed while hci_enhanced_setu... Affects linux versions < 6.11.4-1. Fixed in 6.11.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, responsible for managing hardware interactions and system resources. It provides essential functionalities for various hardware components, including Bluetooth connectivity. This package is crucial for ensuring that devices can communicate effectively and efficiently. However, vulnerabilities within the Linux kernel can lead to severe security risks, potentially allowing unauthorized access or system crashes.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to Bluetooth connections, specifically a Use-After-Free (UAF) issue in the hci_enhanced_setup_sync function. This vulnerability arises when an ACL connection may be destroyed while the command is still pending, leading to a crash or unexpected behavior. The issue is characterized by a slab-use-after-free error, which can be exploited by an attacker to manipulate memory and execute arbitrary code, posing a significant risk to system integrity and security.
How To Fix
Minimum fixed version
6.11.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using Bluetooth functionalities until the package is updated. This can help mitigate the risk of exploitation until the patch is applied.
Conclusion
The identified vulnerability in the Linux package poses a significant risk due to its potential for exploitation through Bluetooth connections. Users are strongly encouraged to update to the patched version 6.11.4-1 to safeguard their systems. For those unable to update immediately, disabling Bluetooth functionalities can serve as a temporary workaround. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
A Use-After-Free vulnerability occurs when a program continues to use a memory location after it has been freed, potentially leading to crashes or arbitrary code execution.
You can use Vulert, which monitors open-source vulnerabilities in your software. By simply uploading your manifest file, such as package-lock.json, you can check if your application is affected.
The risks include potential unauthorized access to system resources, crashes, and the possibility of executing arbitrary code, which can compromise system security.
Yes, the vulnerability affects the Linux package in Debian versions 13 and 14 prior to the fixed version 6.11.4-1.
If immediate updates are not possible, it is advisable to disable Bluetooth functionalities as a temporary measure to reduce the risk of exploitation.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
