CVE-2024-53207

Bluetooth: MGMT: Fix possible deadlocks

State: Published
Severity: 7.8 High
Published: Dec 27, 2024
Updated: Aug 5, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix possible deadlocks

This fixes possible deadlocks like the following caused by hci_cmd_sync_dequeue causing the destroy function to run:

INFO: task kworker/u19:0:143 blocked for more than 120 seconds. Tainted: G W O 6.8.0-2024-03-19-intel-next-iLS-24ww14 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u19:0 state:D stack:0 pid:143 tgid:143 ppid:2 flags:0x00004000 Workqueue: hci0 hci_cmd_sync_work [bluetooth] Call Trace: <TASK> __schedule+0x374/0xaf0 schedule+0x3c/0xf0 schedule_preempt_disabled+0x1c/0x30 __mutex_lock.constprop.0+0x3ef/0x7a0 __mutex_lock_slowpath+0x13/0x20 mutex_lock+0x3c/0x50 mgmt_set_connectable_complete+0xa4/0x150 [bluetooth] ? kfree+0x211/0x2a0 hci_cmd_sync_dequeue+0xae/0x130 [bluetooth] ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth] cmd_complete_rsp+0x26/0x80 [bluetooth] mgmt_pending_foreach+0x4d/0x70 [bluetooth] __mgmt_power_off+0x8d/0x180 [bluetooth] ? _raw_spin_unlock_irq+0x23/0x40 hci_dev_close_sync+0x445/0x5b0 [bluetooth] hci_set_powered_sync+0x149/0x250 [bluetooth] set_powered_sync+0x24/0x60 [bluetooth] hci_cmd_sync_work+0x90/0x150 [bluetooth] process_one_work+0x13e/0x300 worker_thread+0x2f7/0x420 ? __pfx_worker_thread+0x10/0x10 kthread+0x107/0x140 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x3d/0x60 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK>

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-667 Improper Locking

Affected Products

Product	Versions
LinuxLinux	19b40ca62607cef78369549d1af091f2fd558931 to before c3f594a3473d6429a0bcf2004cb2885368741b79Affected 4883296505aa7e4863c6869b689afb6005633b23 to before 5703fb1d85f653e35b327b14de4db7da239e4fd9Affected 8c3f7943a29145d8a2d8e24893762f7673323eae to before 6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739eAffected f53e1c9c726d83092167f2226f32bd3b73f26c21 to before cac34e44281f1f1bd842adbbcfe3ef9ff0905111Affected f53e1c9c726d83092167f2226f32bd3b73f26c21 to before a66dfaf18fd61bb75ef8cee83db46b2aadf153d0Affected 0cc47233af35fb5f10b5e6a027cb4ccd480caf9aAffected 6.6.55 to before 6.6.64Affected 6.11.3 to before 6.11.11Affected 6.10.14 to before 6.11Affected
LinuxLinux	6.12Affected before 6.12Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

19b40ca62607cef78369549d1af091f2fd558931 to before c3f594a3473d6429a0bcf2004cb2885368741b79Affected
4883296505aa7e4863c6869b689afb6005633b23 to before 5703fb1d85f653e35b327b14de4db7da239e4fd9Affected
8c3f7943a29145d8a2d8e24893762f7673323eae to before 6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739eAffected
f53e1c9c726d83092167f2226f32bd3b73f26c21 to before cac34e44281f1f1bd842adbbcfe3ef9ff0905111Affected
f53e1c9c726d83092167f2226f32bd3b73f26c21 to before a66dfaf18fd61bb75ef8cee83db46b2aadf153d0Affected
0cc47233af35fb5f10b5e6a027cb4ccd480caf9aAffected
6.6.55 to before 6.6.64Affected
6.11.3 to before 6.11.11Affected
6.10.14 to before 6.11Affected

LinuxLinux

6.12Affected
before 6.12Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.