CVE-2024-53144
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-53144
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-53144.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-53144
- Downstream
- Related
- Published
- 2024-12-17T16:15:25Z
- Modified
- 2025-08-09T20:01:26Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE
This aligned BR/EDR JUSTWORKS method with LE which since 92516cd97fd4 ("Bluetooth: Always request for user confirmation for Just Works") always request user confirmation with confirmhint set since the likes of bluetoothd have dedicated policy around JUST_WORKS method (e.g. main.conf:JustWorksRepairing).
CVE: CVE-2024-8805
- References
-
- https://www.zerodayinitiative.com/advisories/ZDI-24-1229/
- https://git.kernel.org/stable/c/22b49d6e4f399a390c70f3034f5fbacbb9413858
- https://git.kernel.org/stable/c/5291ff856d2c5177b4fe9c18828312be30213193
- https://git.kernel.org/stable/c/830c03e58beb70b99349760f822e505ecb4eeb7e
- https://git.kernel.org/stable/c/ad7adfb95f64a761e4784381e47bee1a362eb30d
- https://git.kernel.org/stable/c/b25e11f978b63cb7857890edb3a698599cddb10e
- https://git.kernel.org/stable/c/baaa50c6f91ea5a9c7503af51f2bc50e6568b66b
- https://git.kernel.org/stable/c/d17c631ba04e960eb6f8728b10d585de20ac4f71