CVE-2024-56653

Summary

CVE-2024-56653 is a use-after-free vulnerability affecting the Linux kernel's Bluetooth subsystem (btmtk). The issue arises from a sequence in btmtk_process_coredump function, where hci_devcd_append may release an skb (socket buffer) before it can be accessed by the task. This results in a use-after-free condition when the task attempts to access the freed skb. The vulnerability was detected by the kernel address sanitizer (KASAN) and can lead to a kernel crash or potentially be exploited for arbitrary code execution. The affected kernel version is 6.6.40-lockdep-03464-g1d8b4eb3060e.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.