Critical Vulnerability in Linux Package: UAF in Bluetooth Core Dump Processing
Summary
DEBIAN-CVE-2024-56653: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump hci_devcd_append may lead to the release of the skb, so it cannot be accessed once it is called. Affects linux versions < 6.12.6-1. Fixed in 6.12.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It supports a wide range of devices and is crucial for system stability and performance. This vulnerability specifically affects the Bluetooth subsystem, which is responsible for managing Bluetooth devices and connections.
Vulnerability Detail
In the Linux kernel, a use-after-free (UAF) vulnerability has been identified in the Bluetooth subsystem, specifically in the btmtk_process_coredump function. This issue arises when the hci_devcd_append function releases a socket buffer (skb) that is subsequently accessed, leading to potential memory corruption and system instability. The vulnerability can be exploited by an attacker to execute arbitrary code or crash the system, posing a significant risk to users and applications relying on Bluetooth functionality.
How To Fix
Minimum fixed version
6.12.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable Bluetooth functionality until the package is updated. This can be done by executing the command:
sudo systemctl stop bluetooth.service' to stop the Bluetooth service.
Conclusion
The identified vulnerability in the Linux package poses a significant risk to systems utilizing Bluetooth functionality. Users are strongly advised to update to the latest patched version to mitigate potential exploitation. Temporary workarounds are available, but the best course of action is to apply the update as soon as possible.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to memory corruption and exploitation.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
Exploitation of this vulnerability can lead to arbitrary code execution, system crashes, and unauthorized access to sensitive data, posing a serious risk to system integrity.
Yes, you can temporarily disable Bluetooth functionality to mitigate the risk until you can apply the necessary updates.
Detailed information can be found in the official Debian security advisories and vulnerability databases, as well as on platforms like Vulert.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
