CVE-2024-38620 Bluetooth: HCI: Remove HCI_AMP support

2024-06-2008:03:43

Linux

github.com

linux kernel

cve-2024-38620

bluetooth

hci

vulnerability

bluetooth controllers

AI Score

6.9

Confidence

Low

EPSS

Percentile

15.6%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: HCI: Remove HCI_AMP support

Since BT_HS has been remove HCI_AMP controllers no longer has any use so
remove it along with the capability of creating AMP controllers.

Since we no longer need to differentiate between AMP and Primary
controllers, as only HCI_PRIMARY is left, this also remove
hdev->dev_type altogether.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "244bc377591c",
        "lessThan": "5af2e235b0d5",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "244bc377591c",
        "lessThan": "d3c7b012d912",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "244bc377591c",
        "lessThan": "af1d425b6dc6",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "244bc377591c",
        "lessThan": "84a4bb6548a2",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/bluetooth/btmrvl_main.c",
      "drivers/bluetooth/btrsi.c",
      "drivers/bluetooth/btsdio.c",
      "drivers/bluetooth/btusb.c",
      "drivers/bluetooth/hci_bcm4377.c",
      "drivers/bluetooth/hci_ldisc.c",
      "drivers/bluetooth/hci_serdev.c",
      "drivers/bluetooth/hci_uart.h",
      "drivers/bluetooth/hci_vhci.c",
      "drivers/bluetooth/virtio_bt.c",
      "include/net/bluetooth/hci.h",
      "include/net/bluetooth/hci_core.h",
      "include/uapi/linux/virtio_bt.h",
      "net/bluetooth/hci_conn.c",
      "net/bluetooth/hci_core.c",
      "net/bluetooth/hci_event.c",
      "net/bluetooth/hci_sock.c",
      "net/bluetooth/hci_sync.c",
      "net/bluetooth/l2cap_core.c",
      "net/bluetooth/mgmt.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.3"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.3",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.6.33",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.8.12",
        "versionType": "custom",
        "lessThanOrEqual": "6.8.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.3",
        "versionType": "custom",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/bluetooth/btmrvl_main.c",
      "drivers/bluetooth/btrsi.c",
      "drivers/bluetooth/btsdio.c",
      "drivers/bluetooth/btusb.c",
      "drivers/bluetooth/hci_bcm4377.c",
      "drivers/bluetooth/hci_ldisc.c",
      "drivers/bluetooth/hci_serdev.c",
      "drivers/bluetooth/hci_uart.h",
      "drivers/bluetooth/hci_vhci.c",
      "drivers/bluetooth/virtio_bt.c",
      "include/net/bluetooth/hci.h",
      "include/net/bluetooth/hci_core.h",
      "include/uapi/linux/virtio_bt.h",
      "net/bluetooth/hci_conn.c",
      "net/bluetooth/hci_core.c",
      "net/bluetooth/hci_event.c",
      "net/bluetooth/hci_sock.c",
      "net/bluetooth/hci_sync.c",
      "net/bluetooth/l2cap_core.c",
      "net/bluetooth/mgmt.c"
    ],
    "defaultStatus": "affected"
  }
]