CVE-2024-58241

A flaw was found in the Linux kernel's Bluetooth HCI core. This vulnerability allows a local denial of service via unregistering the Bluetooth controller or unloading the driver.

The patch prevents a race where work items can still run after hci_unregister_dev() and access a freed hci_dev (use-after-free), leading to kernel crashes. Practically, triggering this requires the ability to unregister/bring down the Bluetooth controller or unload the driver (e.g., CAP_NET_ADMIN/root or physical hot-plug), so it’s not remotely triggerable and the primary risk is local DoS. For the CVSS the PR:H.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.