CVE-2024-53207

A flaw was found in the Linux kernel's Bluetooth subsystem. A local user with basic privileges can trigger a deadlock condition leading to a Denial of Service (DoS). This issue occurs due to improper locking synchronization when dequeuing Bluetooth management commands during device state changes, which causes kernel worker tasks to hang indefinitely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the Bluetooth kernel module from loading by blacklisting it:

1. Create a configuration file in /etc/modprobe.d/:

echo "install bluetooth /bin/true" >> /etc/modprobe.d/disable-bluetooth.conf
echo "blacklist bluetooth" >> /etc/modprobe.d/disable-bluetooth.conf

2. If the module is currently loaded, unload it or restart the system:

modprobe -r bluetooth

Warning: Disabling the bluetooth module prevents all Bluetooth hardware and related peripherals from operating. A system reboot may be required if the module is actively in use and cannot be unloaded.