CVE-2024-50124

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix UAF on iso_sock_timeout

conn->sk maybe have been unlinked/freed while waiting for iso_conn_lock so this checks if the conn->sk is still valid by checking if it part of iso_sk_list.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local access or proximity to Bluetooth radio interfaces, limiting the potential attack surface. Enterprise server deployments and virtualized environments rarely utilize or expose Bluetooth adapters by default, substantially diminishing real-world exposure. In systems where Bluetooth LE audio capabilities are actively used, an attacker could race socket operations to trigger a denial of service via a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.