CVE-2024-56757

Bluetooth: btusb: mediatek: add intf release flow when usb disconnect

State: Published
Severity: 7.8 High
Published: Jan 6, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: mediatek: add intf release flow when usb disconnect

MediaTek claim an special usb intr interface for ISO data transmission. The interface need to be released before unregistering hci device when usb disconnect. Removing BT usb dongle without properly releasing the interface may cause Kernel panic while unregister hci device.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-404 Improper Resource Shutdown or Release

Affected Products

Product	Versions
LinuxLinux	ceac1cb0259de682d78f5c784ef8e0b13022e9d9 to before cc569d791ab2a0de74f76e470515d25d24c9b84bAffected ceac1cb0259de682d78f5c784ef8e0b13022e9d9 to before 489304e67087abddc2666c5af0159cb95afdcf59Affected
LinuxLinux	6.11Affected before 6.11Not affected 6.12.8 through 6.12.*Not affected 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.