Linux · Linux Kernel · CVE-2024-42137
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
The issue is related to a use-after-free error in the Linux kernel's Bluetooth component, specifically within the `qca serdev shutdown()` function. This error can cause a denial of service. The problem arises when the `enable-gpios` property is not configured within DT/ACPI for QCA6390, leading to a failure in enabling Bluetooth after a warm reboot. The fix involves sending the VSC to the reset controller within `qca serdev shutdown()` once Bluetooth was ever enabled, ensuring the `serdev` is still opened before it is flushed or wrote.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.