CVE-2024-24858 - CVE House
Back to Database
Status published Medium CVE-2024-24858

Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()

Vulnerability Description

A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-24858

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • 白家驹 <baijiaju@buaa.edu.cn>
  • 韩桂栋 <hanguidong@buaa.edu.cn>

Affected Vendor

Affected Software

Linux kernel
Vulnerable Versions:
v4.0-rc1

Timeline

Official Publish: February 5th, 2024
Last Modified: May 12th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H

Weaknesses (CWE)