CVE-2024-57987

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-57987
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57987.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-57987
Downstream
Related
Published
2025-02-27T02:07:11.114Z
Modified
2025-11-20T08:05:28.694296Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btrtl: check for NULL in btrtlsetuprealtek()

If insert an USB dongle which chip is not maintained in icidtable, it will hit the NULL point accessed. Add a null point check to avoid the Kernel Oops.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b39910bb54d9ff696caaed4e83ae92a798cd8bf8
Fixed
1158ad8e8abb361d4b2aaa010c9af74de20ab82b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b39910bb54d9ff696caaed4e83ae92a798cd8bf8
Fixed
02f9da874e5e4626f81772eacc18967921998a71
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b39910bb54d9ff696caaed4e83ae92a798cd8bf8
Fixed
3c15082f3567032d196e8760753373332508c2ca

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.2
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.13.1
v6.9

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "82304508464559256127827422225116098612",
                "235746048612677833412408355012031524423",
                "295513647948090736842968151559923006638",
                "203610875356246070072069662407926125920",
                "207279805034372053738619309842950929139",
                "164109670496183625700785914517916050710",
                "181730853908789865955219191391043840390",
                "139542268435415276444643438588632663657",
                "129667751604179980990785110549089545685"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/bluetooth/btrtl.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1158ad8e8abb361d4b2aaa010c9af74de20ab82b",
        "signature_version": "v1",
        "id": "CVE-2024-57987-a1b96dfe"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 429.0,
            "function_hash": "321693012647634249635351752742897348338"
        },
        "target": {
            "file": "drivers/bluetooth/btrtl.c",
            "function": "btrtl_setup_realtek"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1158ad8e8abb361d4b2aaa010c9af74de20ab82b",
        "signature_version": "v1",
        "id": "CVE-2024-57987-d487bfe9"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.12.13
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.2