Riskcovery

CVE-2024-53144

Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

State
Published
Severity
8.8 High
Published
Dec 17, 2024
Updated
Oct 15, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4 ("Bluetooth: Always request for user confirmation for Just Works") always request user confirmation with confirm_hint set since the likes of bluetoothd have dedicated policy around JUST_WORKS method (e.g. main.conf:JustWorksRepairing).

CVE: CVE-2024-8805

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ba15a58b179ed76a7e887177f2b06de12c58ec8f to before baaa50c6f91ea5a9c7503af51f2bc50e6568b66bAffected
  • ba15a58b179ed76a7e887177f2b06de12c58ec8f to before 22b49d6e4f399a390c70f3034f5fbacbb9413858Affected
  • ba15a58b179ed76a7e887177f2b06de12c58ec8f to before d17c631ba04e960eb6f8728b10d585de20ac4f71Affected
  • ba15a58b179ed76a7e887177f2b06de12c58ec8f to before 830c03e58beb70b99349760f822e505ecb4eeb7eAffected
  • ba15a58b179ed76a7e887177f2b06de12c58ec8f to before ad7adfb95f64a761e4784381e47bee1a362eb30dAffected
  • ba15a58b179ed76a7e887177f2b06de12c58ec8f to before 5291ff856d2c5177b4fe9c18828312be30213193Affected
  • ba15a58b179ed76a7e887177f2b06de12c58ec8f to before b25e11f978b63cb7857890edb3a698599cddb10eAffected
  • 373d1dfcffc63c68184419264a7eaed422c7958eAffected
  • bc96ff59b2f19e924d9e15e24cee19723d674b92Affected
  • 6ab84785311dc4d0348e6bd4e1c491293b770b98Affected
  • 778763287ded64dd5c022435d3e0e3182f148a64Affected
  • 9a5fcacabde0fe11456f4a1e88072c01846cea25Affected
  • 039da39a616103ec7ab8ac351bfb317854e5507cAffected
  • 3.2.61 to before 3.3Affected
  • 3.4.98 to before 3.5Affected
  • 3.10.48 to before 3.11Affected
  • 3.12.25 to before 3.13Affected
  • 3.14.12 to before 3.15Affected
  • 3.15.5 to before 3.16Affected
LinuxLinux
  • 3.16Affected
  • before 3.16Not affected
  • 5.10.236 through 5.10.*Not affected
  • 5.15.180 through 5.15.*Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.