CVE-2024-53144

Published: Dec 17, 2024Modified: Aug 4, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4 ("Bluetooth: Always request for user confirmation for Just Works") always request user confirmation with confirm_hint set since the likes of bluetoothd have dedicated policy around JUST_WORKS method (e.g. main.conf:JustWorksRepairing). CVE: CVE-2024-8805

Affected (19)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 3.10.48 to 3.11
Linux Linux Kernel	From 3.12.25 to 3.13
Linux Linux Kernel	From 3.14.12 to 3.15
Linux Linux Kernel	From 3.15.5 to 3.16
Linux Linux Kernel	From 3.16.1 to 5.10.236
Linux Linux Kernel	From 3.2.61 to 3.3
Linux Linux Kernel	From 3.4.98 to 3.5
Linux Linux Kernel	From 5.11 to 5.15.180
Linux Linux Kernel	From 5.16 to 6.1.113
Linux Linux Kernel	From 6.11 to 6.11.3
Linux Linux Kernel	From 6.2 to 6.6.55
Linux Linux Kernel	From 6.7 to 6.10.14
Linux Linux Kernel	Version 3.16
Linux Linux Kernel	Version 3.16 rc3
Linux Linux Kernel	Version 3.16 rc4
Linux Linux Kernel	Version 3.16 rc5
Linux Linux Kernel	Version 3.16 rc6
Linux Linux Kernel	Version 3.16 rc7
Linux Linux Kernel	Version 6.12 rc1