Riskcovery

CVE-2024-57879

Bluetooth: iso: Always release hdev at the end of iso_listen_bis

State
Published
Severity
Not scored
Published
Jan 11, 2025
Updated
May 23, 2026
Reserved
Jan 11, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: iso: Always release hdev at the end of iso_listen_bis

Since hci_get_route holds the device before returning, the hdev should be released with hci_dev_put at the end of iso_listen_bis even if the function returns with an error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 02171da6e86a73e1b343b36722f5d9d5c04b3539 to before 4ca50db1c567d658d173c5ef3ee6c52b0b03603cAffected
  • 02171da6e86a73e1b343b36722f5d9d5c04b3539 to before 9c76fff747a73ba01d1d87ed53dd9c00cb40ba05Affected
  • a6c3af0a620082d191dabc69c4925b3e6c26dd48Affected
  • 6.8.12 to before 6.9Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.6 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.