VULNERABILITY INTELLIGENCE

CVE-2024-53144

CVSS score8.8 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2024-12-17
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4 ("Bluetooth: Always request for user confirmation for Just Works") always request user confirmation with confirm_hint set since the likes of bluetoothd have dedicated policy around JUST_WORKS method (e.g. main.conf:JustWorksRepairing). CVE: CVE-2024-8805

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references