CVE-2024-42137

CVE Details

Release Date:

2024-07-30

Description

In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot\nCommit 272970be3dab ('Bluetooth: hci_qca: Fix driver shutdown on closed\nserdev') will cause below regression issue:\nBT can't be enabled after below steps:\ncold boot -> enable BT -> disable BT -> warm reboot -> BT enable failure\nif property enable-gpios is not configured within DT|ACPI for QCA6390.\nThe commit is to fix a use-after-free issue within qca_serdev_shutdown()\nby adding condition to avoid the serdev is flushed or wrote after closed\nbut also introduces this regression issue regarding above steps since the\nVSC is not sent to reset controller during warm reboot.\nFixed by sending the VSC to reset controller within qca_serdev_shutdown()\nonce BT was ever enabled, and the use-after-free issue is also fixed by\nthis change since the serdev is still opened before it is flushed or wrote.\nVerified by the reported machine Dell XPS 13 9310 laptop over below two\nkernel commits:\ncommit e00fc2700a3f ('Bluetooth: btusb: Fix triggering coredump\nimplementation for QCA') of bluetooth-next tree.\ncommit b23d98d46d28 ('Bluetooth: btusb: Fix triggering coredump\nimplementation for QCA') of linus mainline tree.

See more information about CVE-2024-42137 from MITRE CVE dictionary and NIST NVD

CVSS Scoring

NOTE: The following CVSS v3.1 metrics and score provided are preliminary and subject to review.

Base Score:	5.5	CVSS Vector:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector:	Local network	Attack Complexity:	Low
Privileges Required:	Low	User Interaction:	None
Scope:	Unchanged	Confidentiality Impact:	None
Integrity Impact:	None	Availability Impact:	High

Errata information

Platform	Errata	Release Date
Oracle Linux version 8 (kernel-uek)	ELSA-2024-12618	2024-09-12
Oracle Linux version 9 (kernel-uek)	ELSA-2024-12618	2024-09-12