NVD Vulnerability Detail

CVE-2024-49951

Summary	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed If mgmt_index_removed is called while there are commands queued on cmd_sync it could lead to crashes like the bellow trace: 0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc 0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth] 0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth] 0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth] So while handling mgmt_index_removed this attempts to dequeue commands passed as user_data to cmd_sync.
Publication Date	Oct. 22, 2024, 3:15 a.m.
Registration Date	Oct. 22, 2024, 12:02 p.m.
Last Update	Nov. 13, 2024, 6:06 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/4883296505aa7e4863c6869b689afb6005633b23	Patch
2	https://git.kernel.org/stable/c/0cc47233af35fb5f10b5e6a027cb4ccd480caf9a	Patch
3	https://git.kernel.org/stable/c/8c3f7943a29145d8a2d8e24893762f7673323eae	Patch
4	https://git.kernel.org/stable/c/f53e1c9c726d83092167f2226f32bd3b73f26c21	Patch

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における脆弱性

Title	Linux の Linux Kernel における脆弱性
Summary	Linux の Linux Kernel には、不特定の脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 27, 2024, midnight
Registration Date	Nov. 13, 2024, 12:15 p.m.
Last Update	Nov. 13, 2024, 12:15 p.m.

Affected System

Linux

Linux Kernel 6.0 以上 6.6.55 未満

Linux Kernel 6.11 以上 6.11.3 未満

Linux Kernel 6.12

Linux Kernel 6.7 以上 6.10.14 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-49951	https://www.cve.org/CVERecord?id=CVE-2024-49951
National Vulnerability Database (NVD)
2	CVE-2024-49951	https://nvd.nist.gov/vuln/detail/CVE-2024-49951

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (0cc4723)	https://git.kernel.org/stable/c/0cc47233af35fb5f10b5e6a027cb4ccd480caf9a
2	Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (4883296)	https://git.kernel.org/stable/c/4883296505aa7e4863c6869b689afb6005633b23
3	Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (8c3f794)	https://git.kernel.org/stable/c/8c3f7943a29145d8a2d8e24893762f7673323eae
4	Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (f53e1c9)	https://git.kernel.org/stable/c/f53e1c9c726d83092167f2226f32bd3b73f26c21
Linux Kernel
5	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年11月13日] 掲載	Nov. 13, 2024, 10:48 a.m.