CVE-2024-50029

A flaw was found in the Linux kernel's Bluetooth subsystem. When an Asynchronous Connection-Less (ACL) connection is destroyed while the hci_enhanced_setup_sync function is processing a command, it can lead to a use-after-free (UAF) condition. An adjacent attacker could exploit this vulnerability to cause a denial of service (DoS), disclose sensitive information, or potentially execute arbitrary code.

This issue is considered to be a moderate impact flaw, the reproducer for this issue is not available that could breach the Integrity of the host.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, disable Bluetooth functionality if it is not required. This can be achieved by blacklisting the Bluetooth kernel modules or disabling the Bluetooth service.

To blacklist Bluetooth kernel modules, create a file named /etc/modprobe.d/bluetooth.conf with the following content: blacklist bluetooth install bluetooth /bin/true

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. For example, on Red Hat Enterprise Linux, use: sudo dracut -f -v sudo reboot

Alternatively, to disable the Bluetooth service: sudo systemctl stop bluetooth.service sudo systemctl disable bluetooth.service

Note that disabling Bluetooth will prevent all Bluetooth-related functionality on the system. A system reboot may be required for the changes to fully apply.