CVEvulnerability

CVE-2024-53144

5.5 MEDIUM Published 2024-12-17 Modified 2026-10-15 Official page ↗
Status
Modified
Published
2024-12-17
Last modified
2026-10-15
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4 ("Bluetooth: Always request for user confirmation for Just Works") always request user confirmation with confirm_hint set since the likes of bluetoothd have dedicated policy around JUST_WORKS method (e.g. main.conf:JustWorksRepairing). CVE: CVE-2024-8805

Affected configurations

• linux linux kernel (>= 3.2.61 < 3.3) • linux linux kernel (>= 3.4.98 < 3.5) • linux linux kernel (>= 3.10.48 < 3.11) • linux linux kernel (>= 3.12.25 < 3.13) • linux linux kernel (>= 3.14.12 < 3.15) • linux linux kernel (>= 3.15.5 < 3.16) • linux linux kernel (>= 3.16.1 < 5.10.236) • linux linux kernel (>= 5.11 < 5.15.180) • linux linux kernel (>= 5.16 < 6.1.113) • linux linux kernel (>= 6.2 < 6.6.55) • linux linux kernel (>= 6.7 < 6.10.14) • linux linux kernel (>= 6.11 < 6.11.3) • linux linux kernel 3.16 • linux linux kernel 6.12

References