NetSight
IP …
high8.8

CVE-2024-53144

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS…

Impact

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4 ("Bluetooth: Always request for user confirmation for Just Works") always request user confirmation with confirm_hint set since the likes of bluetoothd have dedicated policy around JUST_WORKS method (e.g. main.conf:JustWorksRepairing). CVE: CVE-2024-8805

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2.61 before 3.3
from 3.4.98 before 3.5
from 3.10.48 before 3.11
from 3.12.25 before 3.13
from 3.14.12 before 3.15
from 3.15.5 before 3.16

References