CVE-2024-57894
kernel: Bluetooth: hci_core: Fix sleeping function called from invalid context
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · January 15, 2025
Updated · October 29, 2026
Description
[REJECTED CVE] A vulnerability was identified in the Linux kernel's Bluetooth: hci_core package, where a sleeping function (mutex_lock) was improperly invoked from an invalid context within the HCI event handling workqueue, potentially leading to kernel warnings or deadlocks. An attacker exploiting this flaw could trigger crafted Bluetooth events or malformed packets to indirectly cause system instability or denial of service through workqueue execution paths.
Statement
This CVE has been rejected upstream: https://lore.kernel.org/linux-cve-announce/2025032814-REJECTED-03ca@gregkh/
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-662 · Improper Synchronization