CVE-2024-56654
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 6, 2025
Summary
CVE-2024-56654: A vulnerability in the Linux kernel's Bluetooth subsystem has been identified and addressed. The issue involves using rcu_read_(un)lock while iterating through list_for_each_entry_rcu, which is not safe. Rcu_dereference() values are only valid within the enclosing RCU read-side critical section. Using rcu_dereference() outside of this section, as demonstrated in the provided example, is not legal and can lead to bugs.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX