5.5

CVE-2024-53144

Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4
("Bluetooth: Always request for user confirmation for Just Works")
always request user confirmation with confirm_hint set since the
likes of bluetoothd have dedicated policy around JUST_WORKS method
(e.g. main.conf:JustWorksRepairing).

CVE: CVE-2024-8805
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.2.61 < 3.3
Linux ≫ Linux Kernel Version >= 3.4.98 < 3.5
Linux ≫ Linux Kernel Version >= 3.10.48 < 3.11
Linux ≫ Linux Kernel Version >= 3.12.25 < 3.13
Linux ≫ Linux Kernel Version >= 3.14.12 < 3.15
Linux ≫ Linux Kernel Version >= 3.15.5 < 3.16
Linux ≫ Linux Kernel Version >= 3.16.1 < 5.10.236
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.180
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.113
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.55
Linux ≫ Linux Kernel Version >= 6.7 < 6.10.14
Linux ≫ Linux Kernel Version >= 6.11 < 6.11.3
Linux ≫ Linux Kernel Version3.16 Update-
Linux ≫ Linux Kernel Version3.16 Updaterc3
Linux ≫ Linux Kernel Version3.16 Updaterc4
Linux ≫ Linux Kernel Version3.16 Updaterc5
Linux ≫ Linux Kernel Version3.16 Updaterc6
Linux ≫ Linux Kernel Version3.16 Updaterc7
Linux ≫ Linux Kernel Version6.12 Updaterc1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.01% 0.018
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.