CVE-2024-27416

Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST

State: Published
Severity: 8.8 High
Published: May 17, 2024
Updated: Aug 5, 2026
Reserved: Feb 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST

If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ccb8618c972f941ebc6b2b9db491025b3369efcb to before afec8f772296dd8e5a2a6f83bbf99db1b9ca877fAffected 1769ac55dbf3114d5bf79f11bd5dca80ee263f9c to before 79820a7e1e057120c49be07cbe10643d0706b259Affected 40a33a129d99639921ce00d274cca44ba282f1ac to before df193568d61234c81de7ed4d540c01975de60277Affected 1ef071526848cc3109ade63268854cd7c20ece0c to before c3df637266df29edee85e94cab5fd7041e5753baAffected 25e5d2883002e235f3378b8592aad14aeeef898c to before 30a5e812f78e3d1cced90e1ed750bf027599205fAffected c7f59461f5a78994613afc112cdd73688aef9076 to before fba268ac36ab19f9763ff90d276cde0ce6cd5f31Affected c7f59461f5a78994613afc112cdd73688aef9076 to before 8e2758cc25891d2b76717aaf89b40ed215de188cAffected c7f59461f5a78994613afc112cdd73688aef9076 to before 7e74aa53a68bf60f6019bd5d9a9a1406ec4d4865Affected 2c7f9fda663a1b31a61744ffc456bdb89c4efc7fAffected 746dbb0fc6392eca23de27f8aa9d13979b564889Affected 4.19.297 to before 4.19.309Affected 5.4.259 to before 5.4.271Affected 5.10.199 to before 5.10.212Affected 5.15.137 to before 5.15.151Affected 6.1.60 to before 6.1.81Affected 4.14.328 to before 4.15Affected 6.5.9 to before 6.6Affected
LinuxLinux	6.6Affected before 6.6Not affected 4.19.309 through 4.19.Not affected 5.4.271 through 5.4.Not affected 5.10.212 through 5.10.Not affected 5.15.151 through 5.15.Not affected 6.1.81 through 6.1.Not affected 6.6.21 through 6.6.Not affected 6.7.9 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

ccb8618c972f941ebc6b2b9db491025b3369efcb to before afec8f772296dd8e5a2a6f83bbf99db1b9ca877fAffected
1769ac55dbf3114d5bf79f11bd5dca80ee263f9c to before 79820a7e1e057120c49be07cbe10643d0706b259Affected
40a33a129d99639921ce00d274cca44ba282f1ac to before df193568d61234c81de7ed4d540c01975de60277Affected
1ef071526848cc3109ade63268854cd7c20ece0c to before c3df637266df29edee85e94cab5fd7041e5753baAffected
25e5d2883002e235f3378b8592aad14aeeef898c to before 30a5e812f78e3d1cced90e1ed750bf027599205fAffected
c7f59461f5a78994613afc112cdd73688aef9076 to before fba268ac36ab19f9763ff90d276cde0ce6cd5f31Affected
c7f59461f5a78994613afc112cdd73688aef9076 to before 8e2758cc25891d2b76717aaf89b40ed215de188cAffected
c7f59461f5a78994613afc112cdd73688aef9076 to before 7e74aa53a68bf60f6019bd5d9a9a1406ec4d4865Affected
2c7f9fda663a1b31a61744ffc456bdb89c4efc7fAffected
746dbb0fc6392eca23de27f8aa9d13979b564889Affected
4.19.297 to before 4.19.309Affected
5.4.259 to before 5.4.271Affected
5.10.199 to before 5.10.212Affected
5.15.137 to before 5.15.151Affected
6.1.60 to before 6.1.81Affected
4.14.328 to before 4.15Affected
6.5.9 to before 6.6Affected

LinuxLinux

6.6Affected
before 6.6Not affected
4.19.309 through 4.19.*Not affected
5.4.271 through 5.4.*Not affected
5.10.212 through 5.10.*Not affected
5.15.151 through 5.15.*Not affected
6.1.81 through 6.1.*Not affected
6.6.21 through 6.6.*Not affected
6.7.9 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.