Lucene search

K
redhatcveRedhat.comRH:CVE-2024-24859
HistoryJul 19, 2024 - 8:29 a.m.

CVE-2024-24859

2024-07-1908:29:33
redhat.com
access.redhat.com
9
linux kernel
race condition
bluetooth
denial of service

CVSS3

4.8

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

A race condition vulnerability was found in the Linux kernel’s net/bluetooth in sniff_{min,max}_interval_set() function. This issue can result in a Bluetooth sniffing exception issue, possibly leading to denial of service.

CVSS3

4.8

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High