CVE-2024-53207

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-2024-03-19-intel-next-iLS-24ww14

Description The issue is related to possible deadlocks in the Bluetooth management (MGMT) component of the Linux kernel, caused by the hci cmd sync dequeue function. This can lead to a task being blocked for more than 120 seconds. The problem is associated with the mgmt set connectable complete function and the hci cmd sync work workqueue.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the deadlock issue. As a temporary workaround, consider disabling the Bluetooth functionality until a patch is available. Restrict access to the Bluetooth management interface to minimize the risk of exploitation.