CVE-2024-24858

Note

Priority reason:
Requires write access to debugfs entries, which are restricted to root by default on Ubuntu kernels.
proposed patch shows a fixes record for 3a5c82b78fd2
("Bluetooth: Move LE debugfs file creation into ..."), but the races
appear to have existed since the introduction of the
{conn,adv}_{min,max}_interval_set() functions.

Parameter	Value
Base score	5.3
Attack vector	Adjacent
Attack complexity	High
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2024-24858

From the Ubuntu Security Team

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-227.239) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (5.4.0-189.209)
	jammy	Released (5.15.0-116.126)
	mantic	Ignored (end of life, was pending [6.5.0-45.45])
	noble	Released (6.8.0-38.38)
	trusty	Ignored (ESM criteria, was needed)
	upstream	Released (6.9~rc3, 6.8.5)
	xenial	Released (4.4.0-257.291) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	Patches: Introduced by 4e70c7e71c5f9cf11013628ab5a0ced449b1c7b2 Fixed by 7835fcfd132eb88b87e8eb901f88436f63ab60f7 Introduced by 729a1051da6ff92e52ef8773e1676d462dc43b90 Fixed by 7835fcfd132eb88b87e8eb901f88436f63ab60f7
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support)
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1170.183) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (5.4.0-1128.138)
	jammy	Released (5.15.0-1065.71)
	mantic	Ignored (end of life, was needed)
	noble	Released (6.8.0-1011.12)
	trusty	Released (4.4.0-1134.140) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	upstream	Released (6.9~rc3, 6.8.5)
	xenial	Released (4.4.0-1172.187) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.3)
	xenial	Does not exist
linux-aws-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.13)
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.13)