Riskcovery

CVE-2024-42133

Bluetooth: Ignore too large handle values in BIG

State
Published
Severity
7.6 High
Published
Jul 30, 2024
Updated
Aug 5, 2026
Reserved
Jul 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Ignore too large handle values in BIG

hci_le_big_sync_established_evt is necessary to filter out cases where the handle value is belonging to ida id range, otherwise ida will be erroneously released in hci_conn_cleanup.

Scores

CVSSScoreVectorSource
3.17.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f7e83f2278f06b577e3c92ea2f4e8e8c6fc72a8f to before a06a8cc80fa203fde828a8429583f7e4fe27eca4Affected
  • 84cb0143fb8a03bf941c7aaedd56c938c99dafad to before 38263088b845abeeeb98dda5b87c0de3063b6dbbAffected
  • 181a42edddf51d5d9697ecdf365d72ebeab5afb0 to before dad0003ccc68457baf005a6ed75b4d321463fe3dAffected
  • 181a42edddf51d5d9697ecdf365d72ebeab5afb0 to before 015d79c96d62cd8a4a359fcf5be40d58088c936bAffected
  • e9f708beada55426c8d678e2f46af659eb5bf4f0Affected
  • 6.6.2 to before 6.6.39Affected
  • 6.5.12 to before 6.6Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.6.39 through 6.6.*Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.