CVE-2024-56591 - Bluetooth: hci_conn: Use disable_delayed_work_sync

Back Back to CVE browser

HIGH

Bluetooth: hci_conn: Use disable_delayed_work_sync

Published Dec 27, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.28%

Description

This makes use of disable_delayed_work_sync instead cancel_delayed_work_sync as it not only cancel the ongoing work but also disables new submit which is disarable since the object holding the work is about to be freed.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  3.3
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <3.3
- Version
  6.12.5
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.13
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected

Linux

affected

Version	Status	Constraints
3.3	affected	-
0	unaffected	<3.3
6.12.5	unaffected	<=6.12.*
6.13	unaffected	<=*

Red Hat Enterprise Linux 9

kernel-0:5.14.0-570.12.1.el9_6

Fixed · RHSA-2025:6966
Red Hat Enterprise Linux 9

kernel-0:5.14.0-570.12.1.el9_6

Fixed · RHSA-2025:6966
Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 8

kernel

Out of support scope
Red Hat Enterprise Linux 8

kernel-rt

Out of support scope
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 9	kernel-0:5.14.0-570.12.1.el9_6	Fixed	RHSA-2025:6966
Red Hat Enterprise Linux 9	kernel-0:5.14.0-570.12.1.el9_6	Fixed	RHSA-2025:6966
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-99

References (8)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2024-56591		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2334426		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53239		Advisory
https://git.kernel.org/stable/c/2b0f2fc9ed62e73c95df1fa8ed2ba3dac54699df		Patch
https://git.kernel.org/stable/c/c55a4c5a04bae40dcdc1e1c19d8eb79a06fb3397		Patch
https://lore.kernel.org/linux-cve-announce/2024122759-CVE-2024-56591-eaf9@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-56591
https://www.cve.org/CVERecord?id=CVE-2024-56591