CVE-2024-50077

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. When the debug file system (debugfs) is not enabled, a logic error can cause the ISO subsystem to be initialized multiple times. This issue can be exploited by a local attacker with low privileges, leading to a kernel error that crashes the system. The primary consequence is a denial of service, making the system unavailable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the bluetooth kernel module from loading. This can be achieved by creating a blacklist entry. Create a file /etc/modprobe.d/disable-bluetooth.conf with the following content: blacklist bluetooth and install bluetooth /bin/true. Regenerate the initramfs using dracut -f -v and reboot the system for the changes to take effect. Disabling the Bluetooth module will prevent all Bluetooth functionality on the system.