{"id":"CVE-2024-24859","revision":"3adff3afd7d347b0b37c8532c0274cf3","records":[{"revision":"3adff3afd7d347b0b37c8532c0274cf3","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-24859","aliases":[],"title":"Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()","description":"A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service.\n\n\n\n\n\n\n\n","state":0,"publishedAt":"2024-02-05T07:28:06.115+00:00","modifiedAt":"2026-10-15T00:38:12.225+00:00","affected":[{"ecosystem":"Vendor product","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"modules\": [\n                        \"bluetooth\"\n                    ],\n                    \"packageName\": \"kernel\",\n                    \"platforms\": [\n                        \"Linux\",\n                        \"x86\",\n                        \"ARM\"\n                    ],\n                    \"product\": \"Linux kernel\",\n                    \"programFiles\": [\n                        \"https://gitee.com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/hci_debugfs.c\"\n                    ],\n                    \"repo\": \"https://gitee.com/anolis/cloud-kernel.git\",\n                    \"vendor\": \"Linux\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"v6.8-rc2\",\n                            \"status\": \"affected\",\n                            \"version\": \"v4.0-rc1\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H","score":4.6,"severity":"MEDIUM"}],"references":["https://bugzilla.openanolis.cn/show_bug.cgi?id=8153"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-24859","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-24859","identifiers":["CVE-2024-24859"]},"retained":false,"historicalAffected":[]}],"coverage":[]}