Skip to content
Fencer Vulns
medium 4.6

CVE-2024-24860 json

Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()

published 2024-02-05 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-22223

cvss
4.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 57%
public exploits
0
none known

Summary

A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

Patch / fix

  • Linux Linux kernel v6.8-rc1
  • linux Debian 12 6.1.76-1
  • linux Debian 14, Debian 13 6.6.15-1

debian advisories DEBIAN-CVE-2024-24860

  • linux Ubuntu 20.04 LTS 5.4.0-193.213
  • linux Ubuntu 22.04 LTS 5.15.0-102.112
  • linux-aws Ubuntu 20.04 LTS 5.4.0-1131.141
  • linux-aws Ubuntu 22.04 LTS 5.15.0-1057.63
  • linux-gcp Ubuntu 20.04 LTS 5.4.0-1135.144
  • linux-gcp Ubuntu 22.04 LTS 5.15.0-1055.63
  • linux-gke Ubuntu 22.04 LTS 5.15.0-1054.59
  • linux-ibm Ubuntu 20.04 LTS 5.4.0-1078.83

ubuntu advisories UBUNTU-CVE-2024-24860

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kernel-64kb SLE High Performance Computing 15 SP5-ESPOS, SLES 15 SP5-LTSS, SLE High Performance Computing 15 SP5-LTSS 5.14.21-150500.55.91.1
  • kernel-syms SLE High Performance Computing 15 SP5-ESPOS, SLES for SAP 15 SP5, SLES 15 SP5-LTSS +1 more 5.14.21-150500.55.91.1
  • kernel-source SLE High Performance Computing 15 SP5-ESPOS, SLES for SAP 15 SP5, SLES 15 SP5-LTSS +1 more 5.14.21-150500.55.91.1
  • kernel-default SLE Micro 5.5, SLE High Performance Computing 15 SP5-ESPOS, SLES for SAP 15 SP5 +3 more 5.14.21-150500.55.91.1
  • kernel-obs-build SLE High Performance Computing 15 SP5-ESPOS, SLES for SAP 15 SP5, SLES 15 SP5-LTSS +1 more 5.14.21-150500.55.91.1
  • kernel-default-base SLE Micro 5.5, SLE High Performance Computing 15 SP5-ESPOS, SLES for SAP 15 SP5 +2 more 5.14.21-150500.55.91.1.150500.6.41.1
  • kernel-rt SLE Micro 5.5 5.14.21-150500.13.82.1
  • kernel-source-rt SLE Micro 5.5 5.14.21-150500.13.82.1

suse advisories SUSE-SU-2025:0201-1SUSE-SU-2025:0201-2SUSE-SU-2025:0229-1SUSE-SU-2024:0516-1SUSE-SU-2024:0515-1SUSE-SU-2024:0514-1

  • kernel-source-longterm openSUSE Tumbleweed 6.12.11-1.1
  • kernel-source openSUSE Tumbleweed 6.7.5-1.1

opensuse advisories openSUSE-SU-2025:14705-1openSUSE-SU-2024:13696-1

  • kernel Azure Linux 3.0 6.6.35.1-4

azure linux advisories AZL-34884

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.80% chance of exploitation in the next 30 days, higher than 57% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
NVD 3.1 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Linux Linux kernel

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization
  • CWE-476 NULL Pointer Dereference
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.