CVE-2024-38620

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: HCI: Remove HCI_AMP support

Since BT_HS has been remove HCI_AMP controllers no longer has any use so remove it along with the capability of creating AMP controllers.

Since we no longer need to differentiate between AMP and Primary controllers, as only HCI_PRIMARY is left, this also remove hdev->dev_type altogether.

The Linux kernel Bluetooth subsystem's unused HCI AMP (Alternate MAC/PHY) controller support was removed upstream after the BT_HS feature it depended on was dropped. Red Hat rates the impact Moderate (5.5, local denial of service only), matching NIST and below CVE.org's 8.8. All Red Hat product streams are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.