CVE-2024-42141

Source
https://cve.org/CVERecord?id=CVE-2024-42141
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42141.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-42141
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
RHSA (1)
SUSE (5)
UBUNTU (1)
Related
Published
2024-07-30T07:46:35Z
Modified
2026-10-20T10:30:27Z
Summary
Bluetooth: ISO: Check socket flag instead of hcon
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Check socket flag instead of hcon

This fixes the following Smatch static checker warning:

net/bluetooth/iso.c:1364 iso_sock_recvmsg() error: we previously assumed 'pi->conn->hcon' could be null (line 1359)

net/bluetooth/iso.c 1347 static int iso_sock_recvmsg(struct socket *sock, struct msghdr *msg, 1348 size_t len, int flags) 1349 { 1350 struct sock *sk = sock->sk; 1351 struct iso_pinfo *pi = iso_pi(sk); 1352 1353 BT_DBG("sk %p", sk); 1354 1355 if (test_and_clear_bit(BT_SK_DEFER_SETUP, &bt_sk(sk)->flags)) { 1356 lock_sock(sk); 1357 switch (sk->sk_state) { 1358 case BT_CONNECT2: 1359 if (pi->conn->hcon && ^^^^^^^^^^^^^^ If ->hcon is NULL

1360 test_bit(HCI_CONN_PA_SYNC, &pi->conn->hcon->flags)) { 1361 iso_conn_big_sync(sk); 1362 sk->sk_state = BT_LISTEN; 1363 } else { --> 1364 iso_conn_defer_accept(pi->conn->hcon); ^^^^^^^^^^^^^^ then we're toast

1365 sk->sk_state = BT_CONFIG; 1366 } 1367 release_sock(sk); 1368 return 0; 1369 case BT_CONNECTED: 1370 if (test_bit(BT_SK_PA_SYNC,

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42141.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fbdc4bc47268953c80853489f696e02d61f9a2c6
Fixed
045669710464a21c67e690ef14698fd71857cb11
Fixed
33fabef489169c6db87843ef23351ed0d5e51ad8
Fixed
596b6f081336e77764ca35cfeab66d0fcdbe544e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.5.12
Fixed
6.6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c03a10bd5b6ccb22921e04bcddc987410df7e7a9

Affected versions

v6.*
v6.5.12
v6.5.13

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42141.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.6.39
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42141.json"