{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2024-41063", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-07-12T12:17:45.628Z", "datePublished": "2024-07-29T14:57:25.154Z", "dateUpdated": "2026-05-23T15:51:51.517Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-23T15:51:51.517Z" }, "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: cancel all works upon hci_unregister_dev()\n\nsyzbot is reporting that calling hci_release_dev() from hci_error_reset()\ndue to hci_dev_put() from hci_error_reset() can cause deadlock at\ndestroy_workqueue(), for hci_error_reset() is called from\nhdev->req_workqueue which destroy_workqueue() needs to flush.\n\nWe need to make sure that hdev->{rx_work,cmd_work,tx_work} which are\nqueued into hdev->workqueue and hdev->{power_on,error_reset} which are\nqueued into hdev->req_workqueue are no longer running by the moment\n\n destroy_workqueue(hdev->workqueue);\n destroy_workqueue(hdev->req_workqueue);\n\nare called from hci_release_dev().\n\nCall cancel_work_sync() on these work items from hci_unregister_dev()\nas soon as hdev->list is removed from hci_dev_list." } ], "affected": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "net/bluetooth/hci_core.c" ], "versions": [ { "version": "e0b278650f07acf2e0932149183458468a731c03", "lessThan": "48542881997e17b49dc16b93fe910e0cfcf7a9f9", "status": "affected", "versionType": "git" }, { "version": "98fb98fd37e42fd4ce13ff657ea64503e24b6090", "lessThan": "9cfc84b1d464cc024286f42a090718f9067b80ed", "status": "affected", "versionType": "git" }, { "version": "6dd0a9dfa99f8990a08eb8fdd8e79bee31c7d8e2", "lessThan": "ddeda6ca5f218b668b560d90fc31ae469adbfd92", "status": "affected", "versionType": "git" }, { "version": "da4569d450b193e39e87119fd316c0291b585d14", "lessThan": "d2ce562a5aff1dcd0c50d9808ea825ef90da909f", "status": "affected", "versionType": "git" }, { "version": "45085686b9559bfbe3a4f41d3d695a520668f5e1", "lessThan": "96600c2e5ee8213dbab5df1617293d8e847bb4fa", "status": "affected", "versionType": "git" }, { "version": "2ab9a19d896f5a0dd386e1f001c5309bc35f433b", "lessThan": "d6cbce18370641a21dd889e8613d8153df15eb39", "status": "affected", "versionType": "git" }, { "version": "2449007d3f73b2842c9734f45f0aadb522daf592", "lessThan": "3f939bd73fed12dddc2a32a76116c19ca47c7678", "status": "affected", "versionType": "git" }, { "version": "2449007d3f73b2842c9734f45f0aadb522daf592", "lessThan": "0d151a103775dd9645c78c97f77d6e2a5298d913", "status": "affected", "versionType": "git" }, { "version": "dd594cdc24f2e48dab441732e6dfcafd6b0711d1", "status": "affected", "versionType": "git" }, { "version": "4.19.309", "lessThan": "4.19.319", "status": "affected", "versionType": "semver" }, { "version": "5.4.271", "lessThan": "5.4.281", "status": "affected", "versionType": "semver" }, { "version": "5.10.212", "lessThan": "5.10.223", "status": "affected", "versionType": "semver" }, { "version": "5.15.151", "lessThan": "5.15.164", "status": "affected", "versionType": "semver" }, { "version": "6.1.81", "lessThan": "6.1.101", "status": "affected", "versionType": "semver" }, { "version": "6.6.21", "lessThan": "6.6.42", "status": "affected", "versionType": "semver" }, { "version": "6.7.9", "lessThan": "6.8", "status": "affected", "versionType": "semver" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "net/bluetooth/hci_core.c" ], "versions": [ { "version": "6.8", "status": "affected" }, { "version": "0", "lessThan": "6.8", "status": "unaffected", "versionType": "semver" }, { "version": "4.19.319", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.4.281", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.10.223", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.15.164", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.1.101", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.6.42", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.9.11", "lessThanOrEqual": "6.9.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.10", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "cpeApplicability": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.309", "versionEndExcluding": "4.19.319" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.271", "versionEndExcluding": "5.4.281" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.212", "versionEndExcluding": "5.10.223" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.151", "versionEndExcluding": "5.15.164" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.81", "versionEndExcluding": "6.1.101" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.21", "versionEndExcluding": "6.6.42" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.9.11" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.10" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7.9" } ] } ] } ], "references": [ { "url": "https://git.kernel.org/stable/c/48542881997e17b49dc16b93fe910e0cfcf7a9f9" }, { "url": "https://git.kernel.org/stable/c/9cfc84b1d464cc024286f42a090718f9067b80ed" }, { "url": "https://git.kernel.org/stable/c/ddeda6ca5f218b668b560d90fc31ae469adbfd92" }, { "url": "https://git.kernel.org/stable/c/d2ce562a5aff1dcd0c50d9808ea825ef90da909f" }, { "url": "https://git.kernel.org/stable/c/96600c2e5ee8213dbab5df1617293d8e847bb4fa" }, { "url": "https://git.kernel.org/stable/c/d6cbce18370641a21dd889e8613d8153df15eb39" }, { "url": "https://git.kernel.org/stable/c/3f939bd73fed12dddc2a32a76116c19ca47c7678" }, { "url": "https://git.kernel.org/stable/c/0d151a103775dd9645c78c97f77d6e2a5298d913" } ], "title": "Bluetooth: hci_core: cancel all works upon hci_unregister_dev()", "x_generator": { "engine": "bippy-1.2.0" } }, "adp": [ { "title": "CVE Program Container", "references": [ { "url": "https://git.kernel.org/stable/c/48542881997e17b49dc16b93fe910e0cfcf7a9f9", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/9cfc84b1d464cc024286f42a090718f9067b80ed", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/ddeda6ca5f218b668b560d90fc31ae469adbfd92", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/d2ce562a5aff1dcd0c50d9808ea825ef90da909f", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/96600c2e5ee8213dbab5df1617293d8e847bb4fa", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/d6cbce18370641a21dd889e8613d8153df15eb39", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/3f939bd73fed12dddc2a32a76116c19ca47c7678", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/0d151a103775dd9645c78c97f77d6e2a5298d913", "tags": [ "x_transferred" ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html" } ], "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T22:00:11.784Z" } }, { "metrics": [ { "other": { "type": "ssvc", "content": { "id": "CVE-2024-41063", "role": "CISA Coordinator", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "version": "2.0.3", "timestamp": "2024-09-10T16:22:02.545206Z" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:32:59.040Z" } } ] } }