CVE-2024-24859

Note

Priority reason:
Requires write access to debugfs entries, which are restricted to root by default on Ubuntu kernels.
7835fcfd132e (Bluetooth: Fix TOCTOU in HCI debugfs
implementation, 2024-03-27) doesn't reference this CVE in its commit
message, but fixes the issues in the sniff_{min,max}_interval_set()
functions as well.

Parameter	Value
Base score	4.8
Attack vector	Adjacent
Attack complexity	High
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2024-24859

From the Ubuntu Security Team

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Pending (4.15.0-227.239)
	focal	Released (5.4.0-189.209)
	jammy	Released (5.15.0-116.126)
	mantic	Ignored (end of life, was pending [6.5.0-45.45])
	noble	Released (6.8.0-38.38)
	trusty	Ignored (ESM criteria, was needed)
	upstream	Released (6.9~rc3, 6.8.5)
	xenial	Pending (4.4.0-257.291)
	Patches: Introduced by 04837f6447c7f3ef114cda1ad761822dedbff8cf Fixed by 7835fcfd132eb88b87e8eb901f88436f63ab60f7
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support)
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Pending (4.15.0-1170.183)
	focal	Released (5.4.0-1128.138)
	jammy	Released (5.15.0-1065.71)
	mantic	Ignored (end of life, was needed)
	noble	Released (6.8.0-1011.12)
	trusty	Pending (4.4.0-1134.140)
	upstream	Released (6.9~rc3, 6.8.5)
	xenial	Pending (4.4.0-1172.187)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.3)
	xenial	Does not exist
linux-aws-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.13)
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.13)