CVE-2024-43884

Bluetooth: MGMT: Add error handling to pair_device()

MEDIUM

5.5

CVSS Score

Published: August 26, 2024 at 07:11 AM UTC

Updated: June 17, 2026 at 07:51 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pair_device() hci_conn_params_add() never checks for a NULL value and could lead to a NULL pointer dereference causing a crash. Fixed by adding error handling in the function.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.3 ≤ v ≤ 6.10.64.3 ≤ v < 4.19.3214.3 ≤ v < 5.10.2254.3 ≤ v < 5.15.1664.3 ≤ v < 5.4.2834.3 ≤ v < 6.1.1074.3 ≤ v < 6.10.74.3 ≤ v < 6.114.3 ≤ v < 6.6.485157b8a503fa834e8569c7fed06981e3d3d53db06.11 rc1 6.11 rc2 6.11 rc3 6.11 rc4

Vendor states this is fixed in 064dd929c76532359d2905d90a7c12348043cfd4 (fixed)

Vendor states this is fixed in 11b4b0e63f2621b33b2e107407a7d67a65994ca1 (fixed)

Vendor states this is fixed in 538fd3921afac97158d4177139a0ad39f056dbb2 (fixed)

Vendor states this is fixed in 5da2884292329bc9be32a7778e0e119f06abe503 (fixed)

Vendor states this is fixed in 90e1ff1c15e5a8f3023ca8266e3a85869ed03ee9 (fixed)

Vendor states this is fixed in 951d6cb5eaac5130d076c728f2a6db420621afdb (fixed)

Vendor states this is fixed in 9df9783bd85610d3d6e126a1aca221531f6f6dcb (fixed)

Vendor states this is fixed in ee0799103b1ae4bcfd80dc11a15df085f6ee1b61 (fixed)

Vendor states this is fixed in 4.19.321 (unaffected)

Vendor states this is fixed in 4.3 (unaffected)

Vendor states this is fixed in 5.10.225 (unaffected)

Vendor states this is fixed in 5.15.166 (unaffected)