Executive brief
A race condition exists in the Linux kernel's Bluetooth driver, which manages wireless connections between devices. An attacker with physical proximity or local network access could exploit this flaw to disrupt Bluetooth services. This may result in connection failures or a complete denial of service, impacting the reliability of wireless communication on affected systems.
Technical details
A race condition was identified in the net/bluetooth device driver within the conn_info_{min,max}_age_set() functions. The vulnerability stems from improper synchronization when accessing shared resources, which can trigger an integer overflow (CWE-190). An attacker with high privileges and adjacent network access could exploit this during specific user interactions to cause a denial of service or compromise data integrity. Patches have been released for various Linux distributions, including Debian 10 (buster) in versions 4.19.316-1 and 5.10.216-1~deb10u1.
Affected products
- Linux Linux Kernel 3.19.8, 6.0 to 6.7.2, 6.8-rc1
- Debian Debian Linux 10.0
- Siemens SIMATIC S7-1500 TM MFP GNU/Linux subsystem All versions
Timeline
- 2024-02-05: disclosed: Initial disclosure by OpenAnolis
- 2024-02-05: advisory: NVD published date
- 2024-06-25: patched: Debian LTS security update released for kernel 5.10
- 2024-06-27: patched: Debian LTS security update released for kernel 4.19