CVE-2024-53208
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 27, 2024
Updated: Mar 6, 2025
CWE ID 416
Summary
CVE-2024-53208 is a vulnerability affecting the Linux kernel's Bluetooth subsystem. This issue involves a slab-use-after-free condition in the set_powered_sync function, located in net/bluetooth/mgmt.c. The vulnerability can lead to a crash, as demonstrated in the provided kernel crash report. The issue occurs when a task frees a memory allocation that is later used by another task. Specifically, the memory is freed by task 5246, but it is later used by task 54. This vulnerability was discovered using the syzkaller fuzzer and has been resolved.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.