CVE-2024-38620

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38620
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCI_AMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no longer need to differentiate between AMP and Primary controllers, as only HCI_PRIMARY is left, this also remove hdev->dev_type altogether.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156 Patch
https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7 Patch
https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03 Patch
https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec Patch
https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156 Patch
https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7 Patch
https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03 Patch
https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Oct 2025, 16:09

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156 - () https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156 - Patch
References () https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7 - () https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7 - Patch
References () https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03 - () https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03 - Patch
References () https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec - () https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec - Patch

21 Nov 2024, 09:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156 - () https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156 -
References () https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7 - () https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7 -
References () https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03 - () https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03 -
References () https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec - () https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec -

20 Jun 2024, 12:43

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Bluetooth: HCI: eliminar la compatibilidad con HCI_AMP Dado que se eliminó BT_HS, los controladores HCI_AMP ya no tienen ningún uso, así que elimínelos junto con la capacidad de crear controladores AMP. Como ya no necesitamos diferenciar entre los controladores AMP y primarios, ya que solo queda HCI_PRIMARY, esto también elimina hdev->dev_type por completo.

20 Jun 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-20 08:15

Updated : 2025-10-03 16:09

NVD link : CVE-2024-38620

Mitre link : CVE-2024-38620

CVE.ORG link : CVE-2024-38620

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo