CVE-2024-53144

A flaw was found in the Linux kernel's Bluetooth subsystem. The kernel failed to request user confirmation during Basic Rate/Enhanced Data Rate (BR/EDR) pairing using the Just Works method, preventing user-space Bluetooth services from enforcing pairing policies. An unauthenticated attacker within Bluetooth range could exploit this issue to pair with the host device without user approval or notification.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Disable the Bluetooth service and prevent the kernel module from loading if Bluetooth functionality is not required.

1. Stop and mask the Bluetooth systemd service:

# systemctl stop bluetooth.service
# systemctl mask bluetooth.service

2. Prevent the kernel module from autoloading:

# echo "install bluetooth /bin/true" > /etc/modprobe.d/disable-bluetooth.conf

Caveats: This action disables all Bluetooth capabilities, including wireless input devices, audio peripherals, and file transfers. A system reboot may be required to completely unload the module if it is currently loaded and active in the running kernel.