CVE-2024-53237 in Linux
Sumário
de VulDB • 25/05/2026
No kernel do Linux, a seguinte vulnerabilidade foi resolvida:
Bluetooth: corrige use-after-free em device_for_each_child()
O Syzbot relatou o seguinte KASAN splat:
BUG: KASAN: slab-use-after-free em device_for_each_child+0x18f/0x1a0 Leitura de tamanho 8 no endereço ffff88801f605308 pela tarefa kbnepd bnep0/4980
CPU: 0 UID: 0 PID: 4980 Comm: kbnepd bnep0 Não contaminado 6.12.0-rc4-00161-gae90f6a6170d #1 Nome do hardware: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 Call Trace: dump_stack_lvl+0x100/0x190 ? device_for_each_child+0x18f/0x1a0 print_report+0x10a/0x4e0 kasan_report+0x131/0x130 ? device_for_each_child+0x18f/0x1a0 kasan_check_range+0x140/0x180 ? device_for_each_child+0x18f/0x1a0 device_for_each_child+0x18f/0x1a0 bnep_session+0x132/0x200 ? __pfx_bnep_session+0x10/0x10 kthread+0x13a/0x370 ? __pfx_bnep_session+0x10/0x10 kthread+0x2b7/0x370 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x48/0x80 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30
If you want to get best quality of vulnerability data, you may have to visit VulDB.