CVE-2024-21803

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.12-rc2 through 6.8-rc1

Description The issue is related to a Use After Free vulnerability in the Linux kernel's bluetooth module, specifically in the net/bluetooth/af bluetooth.c driver. This vulnerability can be exploited to allow an attacker to execute arbitrary code locally. The vulnerability is associated with the program file https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af bluetooth.C.

Recommendations For Linux kernel versions 2.6.12-rc2 through 6.8-rc1, update to a version after 6.8-rc1 to resolve the issue. As a temporary workaround, consider disabling the bluetooth module until a patch is available. Restrict access to the vulnerable af bluetooth.c driver to minimize the risk of exploitation.