CVE-2024-56757

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: mediatek: add intf release flow when usb disconnect

MediaTek claim an special usb intr interface for ISO data transmission. The interface need to be released before unregistering hci device when usb disconnect. Removing BT usb dongle without properly releasing the interface may cause Kernel panic while unregister hci device.

This vulnerability is rated as Moderate impact because triggering the denial of service requires local access to specific MediaTek Bluetooth hardware, limiting the attack blast radius to system availability without permitting arbitrary code execution or data leakage. Standard Red Hat Enterprise Linux server deployments rarely utilize Bluetooth USB adapters, significantly limiting practical exposure across default installations. Exploitation requires physical removal of an active MediaTek USB peripheral or detachment of an assigned or emulated device in a virtual environment to induce the kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.