CVE-2024-27416

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST

If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= ccb8618c972f941ebc6b2b9db491025b3369efcb, < afec8f772296dd8e5a2a6f83bbf99db1b9ca877f; >= 1769ac55dbf3114d5bf79f11bd5dca80ee263f9c, < 79820a7e1e057120c49be07cbe10643d0706b259; >= 40a33a129d99639921ce00d274cca44ba282f1ac, < df193568d61234c81de7ed4d540c01975de60277; >= 1ef071526848cc3109ade63268854cd7c20ece0c, < c3df637266df29edee85e94cab5fd7041e5753ba; >= 25e5d2883002e235f3378b8592aad14aeeef898c, < 30a5e812f78e3d1cced90e1ed750bf027599205f; >= c7f59461f5a78994613afc112cdd73688aef9076, < fba268ac36ab19f9763ff90d276cde0ce6cd5f31; >= c7f59461f5a78994613afc112cdd73688aef9076, < 8e2758cc25891d2b76717aaf89b40ed215de188c; >= c7f59461f5a78994613afc112cdd73688aef9076, < 7e74aa53a68bf60f6019bd5d9a9a1406ec4d4865; 2c7f9fda663a1b31a61744ffc456bdb89c4efc7f; 746dbb0fc6392eca23de27f8aa9d13979b564889; >= 4.19.297, < 4.19.309; >= 5.4.259, < 5.4.271; >= 5.10.199, < 5.10.212; >= 5.15.137, < 5.15.151; >= 6.1.60, < 6.1.81; >= 4.14.328, < 4.15; >= 6.5.9, < 6.6
LinuxLinux6.6

References

Timeline

Published
May 17, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-274175.5In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() It seems CVE-2024-274185.5In the Linux kernel, the following vulnerability has been resolved: net: mctp: take ownership of skb in mctp_local_output Currently, mctp_CVE-2024-274194.7In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect CVE-2024-27426.4Operating system command injection vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. An authenticated attackeCVE-2024-27439.1An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2 that would allow aCVE-2024-274315.5In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program CVE-2024-274325.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix PPE hanging issue A patch to resolve aCVE-2024-274337.8In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8CVE-2024-274345.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doCVE-2024-274355.5In the Linux kernel, the following vulnerability has been resolved: nvme: fix reconnection fail due to reserved tag allocation We found a CVE-2024-274365.5In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are foundCVE-2024-274375.5In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devi
CVE-2024-27416: Medium severity, CVSS 5.5 | Vulnix