CVE-2024-53208

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync

This fixes the following crash:

==================================================================

BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353

Read of size 8 at addr ffff888029b4dd18 by task kworker/u9:0/54

CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc6-syzkaller-01155-gf723224742fc #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024

Workqueue: hci0 hci_cmd_sync_work

Call Trace:

<TASK>

__dump_stack lib/dump_stack.c:93 [inline]

dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119

print_address_description mm/kasan/report.c:377 [inline]

print_report+0x169/0x550 mm/kasan/report.c:488

q kasan_report+0x143/0x180 mm/kasan/report.c:601

set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353

hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:328

process_

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References