CVE-2024-27416 — Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated.

Affected (CNA)

Vendor / product	Versions
Linux / Linux	affected ccb8618c972f941ebc6b2b9db491025b3369efcb before afec8f772296dd8e5a2a6f83bbf99db1b9ca877f; affected 1769ac55dbf3114d5bf79f11bd5dca80ee263f9c before 79820a7e1e057120c49be07cbe10643d0706b259; affected 40a33a129d99639921ce00d274cca44ba282f1ac before df193568d61234c81de7ed4d540c01975de60277; affected 1ef071526848cc3109ade63268854cd7c20ece0c before c3df637266df29edee85e94cab5fd7041e5753ba; affected 25e5d2883002e235f3378b8592aad14aeeef898c before 30a5e812f78e3d1cced90e1ed750bf027599205f; affected c7f59461f5a78994613afc112cdd73688aef9076 before fba268ac36ab19f9763ff90d276cde0ce6cd5f31; affected c7f59461f5a78994613afc112cdd73688aef9076 before 8e2758cc25891d2b76717aaf89b40ed215de188c; affected c7f59461f5a78994613afc112cdd73688aef9076 before 7e74aa53a68bf60f6019bd5d9a9a1406ec4d4865; affected 2c7f9fda663a1b31a61744ffc456bdb89c4efc7f; affected 746dbb0fc6392eca23de27f8aa9d13979b564889; affected 4.19.297 before 4.19.309; affected 5.4.259 before 5.4.271; affected 5.10.199 before 5.10.212; affected 5.15.137 before 5.15.151; affected 6.1.60 before 6.1.81; affected 4.14.328 before 4.15; affected 6.5.9 before 6.6
Linux / Linux	affected 6.6; unaffected 0 before 6.6; unaffected 4.19.309 through 4.19.; unaffected 5.4.271 through 5.4.; unaffected 5.10.212 through 5.10.; unaffected 5.15.151 through 5.15.; unaffected 6.1.81 through 6.1.; unaffected 6.6.21 through 6.6.; unaffected 6.7.9 through 6.7.; unaffected 6.8 through

Vendor / product

Versions

Linux / Linux

affected ccb8618c972f941ebc6b2b9db491025b3369efcb before afec8f772296dd8e5a2a6f83bbf99db1b9ca877f; affected 1769ac55dbf3114d5bf79f11bd5dca80ee263f9c before 79820a7e1e057120c49be07cbe10643d0706b259; affected 40a33a129d99639921ce00d274cca44ba282f1ac before df193568d61234c81de7ed4d540c01975de60277; affected 1ef071526848cc3109ade63268854cd7c20ece0c before c3df637266df29edee85e94cab5fd7041e5753ba; affected 25e5d2883002e235f3378b8592aad14aeeef898c before 30a5e812f78e3d1cced90e1ed750bf027599205f; affected c7f59461f5a78994613afc112cdd73688aef9076 before fba268ac36ab19f9763ff90d276cde0ce6cd5f31; affected c7f59461f5a78994613afc112cdd73688aef9076 before 8e2758cc25891d2b76717aaf89b40ed215de188c; affected c7f59461f5a78994613afc112cdd73688aef9076 before 7e74aa53a68bf60f6019bd5d9a9a1406ec4d4865; affected 2c7f9fda663a1b31a61744ffc456bdb89c4efc7f; affected 746dbb0fc6392eca23de27f8aa9d13979b564889; affected 4.19.297 before 4.19.309; affected 5.4.259 before 5.4.271; affected 5.10.199 before 5.10.212; affected 5.15.137 before 5.15.151; affected 6.1.60 before 6.1.81; affected 4.14.328 before 4.15; affected 6.5.9 before 6.6

Linux / Linux

affected 6.6; unaffected 0 before 6.6; unaffected 4.19.309 through 4.19.*; unaffected 5.4.271 through 5.4.*; unaffected 5.10.212 through 5.10.*; unaffected 5.15.151 through 5.15.*; unaffected 6.1.81 through 6.1.*; unaffected 6.6.21 through 6.6.*; unaffected 6.7.9 through 6.7.*; unaffected 6.8 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.