CVE-2024-50255

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface (HCI) component. A null pointer dereference occurs in the hci_read_supported_codecs function because __hci_cmd_sync_sk() incorrectly returns a NULL value for unknown opcodes. A local attacker with low privileges could exploit this vulnerability to trigger a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, disable the Bluetooth kernel module if Bluetooth functionality is not required. This can be achieved by blacklisting the bluetooth module.

1. Create a file /etc/modprobe.d/disable-bluetooth.conf with the following content:

   blacklist bluetooth
   install bluetooth /bin/true
   

2. Regenerate the initramfs:

   sudo dracut -f -v
   

   or for systems using mkinitrd:

   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)
   

3. Reboot the system for the changes to take effect.

This mitigation will prevent the bluetooth module from loading, effectively disabling Bluetooth functionality. A system reboot is required for the changes to be applied.