CVE Database›CVE-2024-57894

CVE-2024-57894

kernel: Bluetooth: hci_core: Fix sleeping function called from invalid context

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · January 15, 2025

Updated · October 29, 2026

Description

[REJECTED CVE] A vulnerability was identified in the Linux kernel's Bluetooth: hci_core package, where a sleeping function (mutex_lock) was improperly invoked from an invalid context within the HCI event handling workqueue, potentially leading to kernel warnings or deadlocks. An attacker exploiting this flaw could trigger crafted Bluetooth events or malformed packets to indirectly cause system instability or denial of service through workqueue execution paths.

Statement

This CVE has been rejected upstream: https://lore.kernel.org/linux-cve-announce/2025032814-REJECTED-03ca@gregkh/

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-662 · Improper Synchronization