GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-53207 (GCVE-0-2024-53207)

Vulnerability from cvelistv5 – Published: 2024-12-27 13:49 – Updated: 2026-08-05 11:44
VLAI
Title
Bluetooth: MGMT: Fix possible deadlocks
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible deadlocks This fixes possible deadlocks like the following caused by hci_cmd_sync_dequeue causing the destroy function to run: INFO: task kworker/u19:0:143 blocked for more than 120 seconds. Tainted: G W O 6.8.0-2024-03-19-intel-next-iLS-24ww14 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u19:0 state:D stack:0 pid:143 tgid:143 ppid:2 flags:0x00004000 Workqueue: hci0 hci_cmd_sync_work [bluetooth] Call Trace: <TASK> __schedule+0x374/0xaf0 schedule+0x3c/0xf0 schedule_preempt_disabled+0x1c/0x30 __mutex_lock.constprop.0+0x3ef/0x7a0 __mutex_lock_slowpath+0x13/0x20 mutex_lock+0x3c/0x50 mgmt_set_connectable_complete+0xa4/0x150 [bluetooth] ? kfree+0x211/0x2a0 hci_cmd_sync_dequeue+0xae/0x130 [bluetooth] ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth] cmd_complete_rsp+0x26/0x80 [bluetooth] mgmt_pending_foreach+0x4d/0x70 [bluetooth] __mgmt_power_off+0x8d/0x180 [bluetooth] ? _raw_spin_unlock_irq+0x23/0x40 hci_dev_close_sync+0x445/0x5b0 [bluetooth] hci_set_powered_sync+0x149/0x250 [bluetooth] set_powered_sync+0x24/0x60 [bluetooth] hci_cmd_sync_work+0x90/0x150 [bluetooth] process_one_work+0x13e/0x300 worker_thread+0x2f7/0x420 ? __pfx_worker_thread+0x10/0x10 kthread+0x107/0x140 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x3d/0x60 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK>
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-10-01 20:03 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 19b40ca62607cef78369549d1af091f2fd558931 , < c3f594a3473d6429a0bcf2004cb2885368741b79 (git)
Affected: 4883296505aa7e4863c6869b689afb6005633b23 , < 5703fb1d85f653e35b327b14de4db7da239e4fd9 (git)
Affected: 8c3f7943a29145d8a2d8e24893762f7673323eae , < 6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739e (git)
Affected: f53e1c9c726d83092167f2226f32bd3b73f26c21 , < cac34e44281f1f1bd842adbbcfe3ef9ff0905111 (git)
Affected: f53e1c9c726d83092167f2226f32bd3b73f26c21 , < a66dfaf18fd61bb75ef8cee83db46b2aadf153d0 (git)
Affected: 0cc47233af35fb5f10b5e6a027cb4ccd480caf9a (git)
Affected: 6.6.55 , < 6.6.64 (semver)
Affected: 6.11.3 , < 6.11.11 (semver)
Affected: 6.10.14 , < 6.11 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.12
Unaffected: 0 , < 6.12 (semver)
Unaffected: 6.6.64 , ≤ 6.6.* (semver)
Unaffected: 6.11.11 , ≤ 6.11.* (semver)
Unaffected: 6.12.2 , ≤ 6.12.* (semver)
Unaffected: 6.13 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-53207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T20:03:43.363328Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-667",
                "description": "CWE-667 Improper Locking",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T20:07:19.898Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:47:35.586Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/mgmt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c3f594a3473d6429a0bcf2004cb2885368741b79",
              "status": "affected",
              "version": "19b40ca62607cef78369549d1af091f2fd558931",
              "versionType": "git"
            },
            {
              "lessThan": "5703fb1d85f653e35b327b14de4db7da239e4fd9",
              "status": "affected",
              "version": "4883296505aa7e4863c6869b689afb6005633b23",
              "versionType": "git"
            },
            {
              "lessThan": "6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739e",
              "status": "affected",
              "version": "8c3f7943a29145d8a2d8e24893762f7673323eae",
              "versionType": "git"
            },
            {
              "lessThan": "cac34e44281f1f1bd842adbbcfe3ef9ff0905111",
              "status": "affected",
              "version": "f53e1c9c726d83092167f2226f32bd3b73f26c21",
              "versionType": "git"
            },
            {
              "lessThan": "a66dfaf18fd61bb75ef8cee83db46b2aadf153d0",
              "status": "affected",
              "version": "f53e1c9c726d83092167f2226f32bd3b73f26c21",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0cc47233af35fb5f10b5e6a027cb4ccd480caf9a",
              "versionType": "git"
            },
            {
              "lessThan": "6.6.64",
              "status": "affected",
              "version": "6.6.55",
              "versionType": "semver"
            },
            {
              "lessThan": "6.11.11",
              "status": "affected",
              "version": "6.11.3",
              "versionType": "semver"
            },
            {
              "lessThan": "6.11",
              "status": "affected",
              "version": "6.10.14",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/mgmt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.12"
            },
            {
              "lessThan": "6.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.64",
                  "versionStartIncluding": "6.6.55",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.11",
                  "versionStartIncluding": "6.11.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.2",
                  "versionStartIncluding": "6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "6.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.10.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible deadlocks\n\nThis fixes possible deadlocks like the following caused by\nhci_cmd_sync_dequeue causing the destroy function to run:\n\n INFO: task kworker/u19:0:143 blocked for more than 120 seconds.\n       Tainted: G        W  O        6.8.0-2024-03-19-intel-next-iLS-24ww14 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:kworker/u19:0   state:D stack:0     pid:143   tgid:143   ppid:2      flags:0x00004000\n Workqueue: hci0 hci_cmd_sync_work [bluetooth]\n Call Trace:\n  \u003cTASK\u003e\n  __schedule+0x374/0xaf0\n  schedule+0x3c/0xf0\n  schedule_preempt_disabled+0x1c/0x30\n  __mutex_lock.constprop.0+0x3ef/0x7a0\n  __mutex_lock_slowpath+0x13/0x20\n  mutex_lock+0x3c/0x50\n  mgmt_set_connectable_complete+0xa4/0x150 [bluetooth]\n  ? kfree+0x211/0x2a0\n  hci_cmd_sync_dequeue+0xae/0x130 [bluetooth]\n  ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth]\n  cmd_complete_rsp+0x26/0x80 [bluetooth]\n  mgmt_pending_foreach+0x4d/0x70 [bluetooth]\n  __mgmt_power_off+0x8d/0x180 [bluetooth]\n  ? _raw_spin_unlock_irq+0x23/0x40\n  hci_dev_close_sync+0x445/0x5b0 [bluetooth]\n  hci_set_powered_sync+0x149/0x250 [bluetooth]\n  set_powered_sync+0x24/0x60 [bluetooth]\n  hci_cmd_sync_work+0x90/0x150 [bluetooth]\n  process_one_work+0x13e/0x300\n  worker_thread+0x2f7/0x420\n  ? __pfx_worker_thread+0x10/0x10\n  kthread+0x107/0x140\n  ? __pfx_kthread+0x10/0x10\n  ret_from_fork+0x3d/0x60\n  ? __pfx_kthread+0x10/0x10\n  ret_from_fork_asm+0x1b/0x30\n  \u003c/TASK\u003e"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached by writing MGMT commands to a local AF_BLUETOOTH/BTPROTO_HCI socket bound to HCI_CHANNEL_CONTROL (hci_sock_sendmsg \u2192 hci_mgmt_cmd), plus the HCIDEVDOWN ioctl path; no over-the-air Bluetooth traffic is involved.\nAC:L - The attacker drives both halves from the same socket \u2014 issue SET_POWERED(off), whose hci_dev_close_sync does workqueue drains and controller shutdown commands, then queue a second cmd_sync entry into that window \u2014 and can retry the sequence indefinitely until it lands.\nPR:L - Sending these MGMT opcodes requires the HCI_SOCK_TRUSTED flag (CAP_NET_ADMIN), which on real deployments is held by the Bluetooth daemon/stack process (bluetoothd, Android AID_BLUETOOTH) rather than full root, so a compromised low-privileged Bluetooth service reaches this directly.\nUI:N - The entire sequence is driven by the attacker\u0027s own MGMT socket writes; no victim action or interaction is needed.\nS:U - The deadlock and memory corruption are confined to the kernel\u0027s own security authority \u2014 there is no VM, IOMMU, or sandbox boundary crossed.\nC:H - Callbacks such as start_discovery_complete and read_local_oob_ext_data_complete free the mgmt_pending_cmd, after which cmd_complete_rsp reads cmd-\u003ecmd_complete from the freed GFP_KERNEL slab object; a heap-sprayed reclaim of that object yields a controlled read primitive and disclosure of kernel memory.\nI:H - The stale cmd is dereferenced for an indirect function-pointer call (cmd-\u003ecmd_complete(cmd, status)) and then passed to mgmt_pending_remove a second time, giving a double free plus list_del on freed memory \u2014 a control-flow-hijack and arbitrary-write primitive.\nA:H - mgmt_set_connectable_complete/mgmt_set_discoverable_complete re-acquire hdev-\u003elock already held by hci_dev_close_sync, permanently deadlocking the hci_cmd_sync_work kworker while holding that mutex, and the UAF/double-free path independently corrupts the slab and panics the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:44:36.976Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c3f594a3473d6429a0bcf2004cb2885368741b79"
        },
        {
          "url": "https://git.kernel.org/stable/c/5703fb1d85f653e35b327b14de4db7da239e4fd9"
        },
        {
          "url": "https://git.kernel.org/stable/c/6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739e"
        },
        {
          "url": "https://git.kernel.org/stable/c/cac34e44281f1f1bd842adbbcfe3ef9ff0905111"
        },
        {
          "url": "https://git.kernel.org/stable/c/a66dfaf18fd61bb75ef8cee83db46b2aadf153d0"
        }
      ],
      "title": "Bluetooth: MGMT: Fix possible deadlocks",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53207",
    "datePublished": "2024-12-27T13:49:53.147Z",
    "dateReserved": "2024-11-19T17:17:25.020Z",
    "dateUpdated": "2026-08-05T11:44:36.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-53207",
      "date": "2026-09-16",
      "epss": "0.00175",
      "percentile": "0.07259"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.6.55\", \"versionEndExcluding\": \"6.6.64\", \"matchCriteriaId\": \"C813C628-8D83-4585-9CCE-3DE13EBB4454\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.10.14\", \"versionEndExcluding\": \"6.11\", \"matchCriteriaId\": \"41AB04F0-1096-4B39-8148-796AB65AA193\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.11.3\", \"versionEndExcluding\": \"6.11.11\", \"matchCriteriaId\": \"C2F1D9BC-CB2F-488F-90F8-8456CD3C44CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.12\", \"versionEndExcluding\": \"6.12.2\", \"matchCriteriaId\": \"D8882B1B-2ABC-4838-AC1D-DBDBB5764776\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: MGMT: Fix possible deadlocks\\n\\nThis fixes possible deadlocks like the following caused by\\nhci_cmd_sync_dequeue causing the destroy function to run:\\n\\n INFO: task kworker/u19:0:143 blocked for more than 120 seconds.\\n       Tainted: G        W  O        6.8.0-2024-03-19-intel-next-iLS-24ww14 #1\\n \\\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\\\" disables this message.\\n task:kworker/u19:0   state:D stack:0     pid:143   tgid:143   ppid:2      flags:0x00004000\\n Workqueue: hci0 hci_cmd_sync_work [bluetooth]\\n Call Trace:\\n  \u003cTASK\u003e\\n  __schedule+0x374/0xaf0\\n  schedule+0x3c/0xf0\\n  schedule_preempt_disabled+0x1c/0x30\\n  __mutex_lock.constprop.0+0x3ef/0x7a0\\n  __mutex_lock_slowpath+0x13/0x20\\n  mutex_lock+0x3c/0x50\\n  mgmt_set_connectable_complete+0xa4/0x150 [bluetooth]\\n  ? kfree+0x211/0x2a0\\n  hci_cmd_sync_dequeue+0xae/0x130 [bluetooth]\\n  ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth]\\n  cmd_complete_rsp+0x26/0x80 [bluetooth]\\n  mgmt_pending_foreach+0x4d/0x70 [bluetooth]\\n  __mgmt_power_off+0x8d/0x180 [bluetooth]\\n  ? _raw_spin_unlock_irq+0x23/0x40\\n  hci_dev_close_sync+0x445/0x5b0 [bluetooth]\\n  hci_set_powered_sync+0x149/0x250 [bluetooth]\\n  set_powered_sync+0x24/0x60 [bluetooth]\\n  hci_cmd_sync_work+0x90/0x150 [bluetooth]\\n  process_one_work+0x13e/0x300\\n  worker_thread+0x2f7/0x420\\n  ? __pfx_worker_thread+0x10/0x10\\n  kthread+0x107/0x140\\n  ? __pfx_kthread+0x10/0x10\\n  ret_from_fork+0x3d/0x60\\n  ? __pfx_kthread+0x10/0x10\\n  ret_from_fork_asm+0x1b/0x30\\n  \u003c/TASK\u003e\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: MGMT: Corrige posibles bloqueos Esto corrige posibles bloqueos como el siguiente causado por hci_cmd_sync_dequeue, lo que hace que se ejecute la funci\\u00f3n de destrucci\\u00f3n: INFO: la tarea kworker/u19:0:143 se bloque\\u00f3 durante m\\u00e1s de 120 segundos. Tainted: GWO 6.8.0-2024-03-19-intel-next-iLS-24ww14 #1 \\\"echo 0 \u0026gt; /proc/sys/kernel/hung_task_timeout_secs\\\" deshabilita este mensaje. tarea:kworker/u19:0 estado:D pila:0 pid:143 tgid:143 ppid:2 indicadores:0x00004000 Cola de trabajo: hci0 hci_cmd_sync_work [bluetooth] Rastreo de llamadas:  __schedule+0x374/0xaf0 schedule+0x3c/0xf0 schedule_preempt_disabled+0x1c/0x30 __mutex_lock.constprop.0+0x3ef/0x7a0 __mutex_lock_slowpath+0x13/0x20 mutex_lock+0x3c/0x50 mgmt_set_connectable_complete+0xa4/0x150 [bluetooth] ? kfree+0x211/0x2a0 hci_cmd_sync_dequeue+0xae/0x130 [bluetooth] ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth] cmd_complete_rsp+0x26/0x80 [bluetooth] mgmt_pending_foreach+0x4d/0x70 [bluetooth] __mgmt_power_off+0x8d/0x180 [bluetooth] ? __pfx_worker_thread+0x10/0x10 kthread+0x107/0x140 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x3d/0x60 ? __pfx_kthread+0x10/0x10 ret_de_fork_asm+0x1b/0x30 \"}]",
      "id": "CVE-2024-53207",
      "lastModified": "2025-01-08T21:26:42.470",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-12-27T14:15:28.563",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/5703fb1d85f653e35b327b14de4db7da239e4fd9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a66dfaf18fd61bb75ef8cee83db46b2aadf153d0\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c3f594a3473d6429a0bcf2004cb2885368741b79\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/cac34e44281f1f1bd842adbbcfe3ef9ff0905111\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-667\"}]}]"
    },
    "microsoft_vex": {
      "current_release_date": "2025-01-29T00:00:00.000Z",
      "cve": "CVE-2024-53207",
      "id": "msrc_CVE-2024-53207",
      "initial_release_date": "2024-12-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "Bluetooth: MGMT: Fix possible deadlocks",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-53207.json",
      "version": "1"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-53207\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-12-27T14:15:28.563\",\"lastModified\":\"2026-08-04T11:22:05.270\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: MGMT: Fix possible deadlocks\\n\\nThis fixes possible deadlocks like the following caused by\\nhci_cmd_sync_dequeue causing the destroy function to run:\\n\\n INFO: task kworker/u19:0:143 blocked for more than 120 seconds.\\n       Tainted: G        W  O        6.8.0-2024-03-19-intel-next-iLS-24ww14 #1\\n \\\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\\\" disables this message.\\n task:kworker/u19:0   state:D stack:0     pid:143   tgid:143   ppid:2      flags:0x00004000\\n Workqueue: hci0 hci_cmd_sync_work [bluetooth]\\n Call Trace:\\n  \u003cTASK\u003e\\n  __schedule+0x374/0xaf0\\n  schedule+0x3c/0xf0\\n  schedule_preempt_disabled+0x1c/0x30\\n  __mutex_lock.constprop.0+0x3ef/0x7a0\\n  __mutex_lock_slowpath+0x13/0x20\\n  mutex_lock+0x3c/0x50\\n  mgmt_set_connectable_complete+0xa4/0x150 [bluetooth]\\n  ? kfree+0x211/0x2a0\\n  hci_cmd_sync_dequeue+0xae/0x130 [bluetooth]\\n  ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth]\\n  cmd_complete_rsp+0x26/0x80 [bluetooth]\\n  mgmt_pending_foreach+0x4d/0x70 [bluetooth]\\n  __mgmt_power_off+0x8d/0x180 [bluetooth]\\n  ? _raw_spin_unlock_irq+0x23/0x40\\n  hci_dev_close_sync+0x445/0x5b0 [bluetooth]\\n  hci_set_powered_sync+0x149/0x250 [bluetooth]\\n  set_powered_sync+0x24/0x60 [bluetooth]\\n  hci_cmd_sync_work+0x90/0x150 [bluetooth]\\n  process_one_work+0x13e/0x300\\n  worker_thread+0x2f7/0x420\\n  ? __pfx_worker_thread+0x10/0x10\\n  kthread+0x107/0x140\\n  ? __pfx_kthread+0x10/0x10\\n  ret_from_fork+0x3d/0x60\\n  ? __pfx_kthread+0x10/0x10\\n  ret_from_fork_asm+0x1b/0x30\\n  \u003c/TASK\u003e\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: MGMT: Corrige posibles bloqueos Esto corrige posibles bloqueos como el siguiente causado por hci_cmd_sync_dequeue, lo que hace que se ejecute la funci\u00f3n de destrucci\u00f3n: INFO: la tarea kworker/u19:0:143 se bloque\u00f3 durante m\u00e1s de 120 segundos. Tainted: GWO 6.8.0-2024-03-19-intel-next-iLS-24ww14 #1 \\\"echo 0 \u0026gt; /proc/sys/kernel/hung_task_timeout_secs\\\" deshabilita este mensaje. tarea:kworker/u19:0 estado:D pila:0 pid:143 tgid:143 ppid:2 indicadores:0x00004000 Cola de trabajo: hci0 hci_cmd_sync_work [bluetooth] Rastreo de llamadas:  __schedule+0x374/0xaf0 schedule+0x3c/0xf0 schedule_preempt_disabled+0x1c/0x30 __mutex_lock.constprop.0+0x3ef/0x7a0 __mutex_lock_slowpath+0x13/0x20 mutex_lock+0x3c/0x50 mgmt_set_connectable_complete+0xa4/0x150 [bluetooth] ? kfree+0x211/0x2a0 hci_cmd_sync_dequeue+0xae/0x130 [bluetooth] ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth] cmd_complete_rsp+0x26/0x80 [bluetooth] mgmt_pending_foreach+0x4d/0x70 [bluetooth] __mgmt_power_off+0x8d/0x180 [bluetooth] ? __pfx_worker_thread+0x10/0x10 kthread+0x107/0x140 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x3d/0x60 ? __pfx_kthread+0x10/0x10 ret_de_fork_asm+0x1b/0x30 \"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/bluetooth/mgmt.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"19b40ca62607cef78369549d1af091f2fd558931\",\"lessThan\":\"c3f594a3473d6429a0bcf2004cb2885368741b79\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4883296505aa7e4863c6869b689afb6005633b23\",\"lessThan\":\"5703fb1d85f653e35b327b14de4db7da239e4fd9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8c3f7943a29145d8a2d8e24893762f7673323eae\",\"lessThan\":\"6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f53e1c9c726d83092167f2226f32bd3b73f26c21\",\"lessThan\":\"cac34e44281f1f1bd842adbbcfe3ef9ff0905111\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f53e1c9c726d83092167f2226f32bd3b73f26c21\",\"lessThan\":\"a66dfaf18fd61bb75ef8cee83db46b2aadf153d0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0cc47233af35fb5f10b5e6a027cb4ccd480caf9a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6.6.55\",\"lessThan\":\"6.6.64\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.11.3\",\"lessThan\":\"6.11.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.10.14\",\"lessThan\":\"6.11\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/bluetooth/mgmt.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.12\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.12\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.64\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11.11\",\"lessThanOrEqual\":\"6.11.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.2\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-10-01T20:03:43.363328Z\",\"id\":\"CVE-2024-53207\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-667\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-667\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.55\",\"versionEndExcluding\":\"6.6.64\",\"matchCriteriaId\":\"C813C628-8D83-4585-9CCE-3DE13EBB4454\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.10.14\",\"versionEndExcluding\":\"6.11\",\"matchCriteriaId\":\"41AB04F0-1096-4B39-8148-796AB65AA193\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.11.3\",\"versionEndExcluding\":\"6.11.11\",\"matchCriteriaId\":\"C2F1D9BC-CB2F-488F-90F8-8456CD3C44CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12\",\"versionEndExcluding\":\"6.12.2\",\"matchCriteriaId\":\"D8882B1B-2ABC-4838-AC1D-DBDBB5764776\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/5703fb1d85f653e35b327b14de4db7da239e4fd9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a66dfaf18fd61bb75ef8cee83db46b2aadf153d0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c3f594a3473d6429a0bcf2004cb2885368741b79\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cac34e44281f1f1bd842adbbcfe3ef9ff0905111\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-05T03:52:52+00:00",
      "cve": "CVE-2024-53207",
      "id": "CVE-2024-53207",
      "initial_release_date": "2024-12-27T00:00:00+00:00",
      "product_status:known_affected": "136",
      "product_status:known_not_affected": "62",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Bluetooth: MGMT: Fix possible deadlocks",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53207.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-12T16:56:28Z",
      "cve": "CVE-2024-53207",
      "id": "CVE-2024-53207",
      "initial_release_date": "2024-12-28T03:50:16Z",
      "product_status:known_affected": "394",
      "product_status:known_not_affected": "481",
      "product_status:recommended": "358",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-53207",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-53207.json",
      "version": "63"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-53207\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-10-01T20:03:43.363328Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-667\", \"description\": \"CWE-667 Improper Locking\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-10-01T15:38:24.346Z\"}}], \"cna\": {\"title\": \"Bluetooth: MGMT: Fix possible deadlocks\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"19b40ca62607cef78369549d1af091f2fd558931\", \"lessThan\": \"c3f594a3473d6429a0bcf2004cb2885368741b79\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4883296505aa7e4863c6869b689afb6005633b23\", \"lessThan\": \"5703fb1d85f653e35b327b14de4db7da239e4fd9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"8c3f7943a29145d8a2d8e24893762f7673323eae\", \"lessThan\": \"6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f53e1c9c726d83092167f2226f32bd3b73f26c21\", \"lessThan\": \"cac34e44281f1f1bd842adbbcfe3ef9ff0905111\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f53e1c9c726d83092167f2226f32bd3b73f26c21\", \"lessThan\": \"a66dfaf18fd61bb75ef8cee83db46b2aadf153d0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0cc47233af35fb5f10b5e6a027cb4ccd480caf9a\", \"versionType\": \"git\"}], \"programFiles\": [\"net/bluetooth/mgmt.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.12\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.12\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.6.64\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.12.*\"}, {\"status\": \"unaffected\", \"version\": \"6.13\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/bluetooth/mgmt.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/c3f594a3473d6429a0bcf2004cb2885368741b79\"}, {\"url\": \"https://git.kernel.org/stable/c/5703fb1d85f653e35b327b14de4db7da239e4fd9\"}, {\"url\": \"https://git.kernel.org/stable/c/6a25ce9b4af6dc26ee2b9c32d6bd37620bf9739e\"}, {\"url\": \"https://git.kernel.org/stable/c/cac34e44281f1f1bd842adbbcfe3ef9ff0905111\"}, {\"url\": \"https://git.kernel.org/stable/c/a66dfaf18fd61bb75ef8cee83db46b2aadf153d0\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: MGMT: Fix possible deadlocks\\n\\nThis fixes possible deadlocks like the following caused by\\nhci_cmd_sync_dequeue causing the destroy function to run:\\n\\n INFO: task kworker/u19:0:143 blocked for more than 120 seconds.\\n       Tainted: G        W  O        6.8.0-2024-03-19-intel-next-iLS-24ww14 #1\\n \\\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\\\" disables this message.\\n task:kworker/u19:0   state:D stack:0     pid:143   tgid:143   ppid:2      flags:0x00004000\\n Workqueue: hci0 hci_cmd_sync_work [bluetooth]\\n Call Trace:\\n  \u003cTASK\u003e\\n  __schedule+0x374/0xaf0\\n  schedule+0x3c/0xf0\\n  schedule_preempt_disabled+0x1c/0x30\\n  __mutex_lock.constprop.0+0x3ef/0x7a0\\n  __mutex_lock_slowpath+0x13/0x20\\n  mutex_lock+0x3c/0x50\\n  mgmt_set_connectable_complete+0xa4/0x150 [bluetooth]\\n  ? kfree+0x211/0x2a0\\n  hci_cmd_sync_dequeue+0xae/0x130 [bluetooth]\\n  ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth]\\n  cmd_complete_rsp+0x26/0x80 [bluetooth]\\n  mgmt_pending_foreach+0x4d/0x70 [bluetooth]\\n  __mgmt_power_off+0x8d/0x180 [bluetooth]\\n  ? _raw_spin_unlock_irq+0x23/0x40\\n  hci_dev_close_sync+0x445/0x5b0 [bluetooth]\\n  hci_set_powered_sync+0x149/0x250 [bluetooth]\\n  set_powered_sync+0x24/0x60 [bluetooth]\\n  hci_cmd_sync_work+0x90/0x150 [bluetooth]\\n  process_one_work+0x13e/0x300\\n  worker_thread+0x2f7/0x420\\n  ? __pfx_worker_thread+0x10/0x10\\n  kthread+0x107/0x140\\n  ? __pfx_kthread+0x10/0x10\\n  ret_from_fork+0x3d/0x60\\n  ? __pfx_kthread+0x10/0x10\\n  ret_from_fork_asm+0x1b/0x30\\n  \u003c/TASK\u003e\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.64\", \"versionStartIncluding\": \"6.6.55\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.11\", \"versionStartIncluding\": \"6.11.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12.2\", \"versionStartIncluding\": \"6.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.13\", \"versionStartIncluding\": \"6.12\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"6.10.14\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T13:00:42.604Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-53207\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-01T20:07:19.898Z\", \"dateReserved\": \"2024-11-19T17:17:25.020Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-12-27T13:49:53.147Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.