CVE-2024-24858: Linux Kernel race condition in Bluetooth subsystem

CVE-2024-24858 · Severity: medium · CVSS 4.6 · Published 2024-02-05

A race condition vulnerability exists in the Bluetooth subsystem of the Linux kernel. This flaw can cause Bluetooth connections or broadcasts to behave abnormally, potentially allowing an attacker in physical proximity to cause a system crash or service outage. This affects various Linux distributions and industrial hardware using Linux-based subsystems, such as certain Siemens SIMATIC controllers.

Technologies: Debian Linux, Linux Kernel, Siemens SIMATIC S7-1500 TM MFP. Vendors: Debian, Linux, Siemens.

Quick answers

Is CVE-2024-24858 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2024-24858 being exploited in the wild.
How severe is CVE-2024-24858?
Medium severity, with a CVSS score of 4.6, published 5 February 2024.
Which products and versions are affected?
Debian Linux 10.0; Linux Kernel 3.19.8, 6.0 to 6.6.25, 6.7 to 6.7.12, 6.8-rc1; Siemens SIMATIC S7-1500 TM MFP All versions affected by GNU/Linux subsystem vulnerabilities.
Is there a fix for CVE-2024-24858?
A patch was published on 2024-06-25: Debian released security updates for linux-5.10 and linux-4.19 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2024-24858 attacked?
It is attacked from the adjacent network, in an operating system.
Am I affected by CVE-2024-24858?
Check whether you run Debian Linux, Linux Kernel or Siemens SIMATIC S7-1500 TM MFP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A race condition was identified in the net/bluetooth component of the Linux kernel, specifically within the {conn,adv}_{min,max}_interval_set() functions. The vulnerability is classified as CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization). An attacker within Bluetooth range (Adjacent) can exploit this timing flaw during the setting of connection or advertising intervals. Successful exploitation can result in I2CAP connection failures or broadcast abnormalities, leading to a Denial of Service (DoS) condition. Patches have been released for various kernel branches, including updates for Debian LTS (versions 4.19.316-1 and 5.10.216-1~deb10u1).

Affected products

  • Linux Linux Kernel 3.19.8, 6.0 to 6.6.25, 6.7 to 6.7.12, 6.8-rc1
  • Debian Debian Linux 10.0
  • Siemens SIMATIC S7-1500 TM MFP All versions affected by GNU/Linux subsystem vulnerabilities

Timeline

  • 2024-02-05: disclosed: Initial disclosure by OpenAnolis
  • 2024-02-05: advisory: NVD entry published
  • 2024-04-09: advisory: Siemens published advisory SSA-265688
  • 2024-06-25: patched: Debian released security updates for linux-5.10 and linux-4.19

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.