CVE-2024-53144

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-53144", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-11-19T17:17:24.997Z", "datePublished": "2024-12-17T15:55:03.394Z", "dateUpdated": "2026-10-15T21:41:46.651Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:44:06.956Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE\n\nThis aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4\n(\"Bluetooth: Always request for user confirmation for Just Works\")\nalways request user confirmation with confirm_hint set since the\nlikes of bluetoothd have dedicated policy around JUST_WORKS method\n(e.g. main.conf:JustWorksRepairing).\n\nCVE: CVE-2024-8805"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:A - The vulnerable code path is driven entirely by BR/EDR HCI events generated from an attacker-controlled Bluetooth peer (Connection Request, IO Capability Response, User Confirmation Request), requiring only radio proximity to the target. Per kernel scoring guidance Bluetooth reachability is Adjacent.\nAC:L - The attacker fully controls both parameters that select the vulnerable branch \u2014 its own IO capability (NoInputNoOutput) and authentication requirements (bonding without MITM) \u2014 making the silent auto-accept deterministic with no race, no memory-layout dependency, and no non-default kernel or BlueZ configuration.\nPR:N - The attacker is an entirely unknown, unpaired, unauthenticated remote device with no prior link key; the bug is reached during the initial pairing handshake before any trust relationship exists.\nUI:N - The defect is precisely that the kernel never invokes mgmt_user_confirm_request, so bluetoothd and the user are never consulted and the bond completes silently with no prompt, notification, or action from the victim.\nS:U - The vulnerable component and the compromised resources are the same host under a single security authority; no hypervisor, IOMMU, or sandbox boundary is crossed.\nC:H - The unauthorized persistent bond makes the attacker a trusted device, enabling connections to profiles that expose highly sensitive data (PBAP phonebook and call logs, MAP SMS, OBEX FTP, audio) on phones and automotive head units, and HID keystroke injection escalates this to arbitrary user-level file read.\nI:H - The attacker writes an unauthorized link key into the host's persistent bonding database and can then act as a trusted HID keyboard/mouse to inject keystrokes and execute arbitrary commands as the logged-in user, push files via OPP, or drive the device over AVRCP/HFP.\nA:H - As a bonded peer the attacker can hijack and force-disconnect the legitimate input or audio device \u2014 the same \"speaker hijack or mouse/keyboard hijack\" outcome documented for the related bluedump attack \u2014 and HID command injection permits shutting down or otherwise disabling the system."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bluetooth/hci_event.c"], "versions": [{"version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "baaa50c6f91ea5a9c7503af51f2bc50e6568b66b", "status": "affected", "versionType": "git"}, {"version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "22b49d6e4f399a390c70f3034f5fbacbb9413858", "status": "affected", "versionType": "git"}, {"version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "d17c631ba04e960eb6f8728b10d585de20ac4f71", "status": "affected", "versionType": "git"}, {"version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "830c03e58beb70b99349760f822e505ecb4eeb7e", "status": "affected", "versionType": "git"}, {"version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "ad7adfb95f64a761e4784381e47bee1a362eb30d", "status": "affected", "versionType": "git"}, {"version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "5291ff856d2c5177b4fe9c18828312be30213193", "status": "affected", "versionType": "git"}, {"version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "b25e11f978b63cb7857890edb3a698599cddb10e", "status": "affected", "versionType": "git"}, {"version": "373d1dfcffc63c68184419264a7eaed422c7958e", "status": "affected", "versionType": "git"}, {"version": "bc96ff59b2f19e924d9e15e24cee19723d674b92", "status": "affected", "versionType": "git"}, {"version": "6ab84785311dc4d0348e6bd4e1c491293b770b98", "status": "affected", "versionType": "git"}, {"version": "778763287ded64dd5c022435d3e0e3182f148a64", "status": "affected", "versionType": "git"}, {"version": "9a5fcacabde0fe11456f4a1e88072c01846cea25", "status": "affected", "versionType": "git"}, {"version": "039da39a616103ec7ab8ac351bfb317854e5507c", "status": "affected", "versionType": "git"}, {"version": "3.2.61", "lessThan": "3.3", "status": "affected", "versionType": "semver"}, {"version": "3.4.98", "lessThan": "3.5", "status": "affected", "versionType": "semver"}, {"version": "3.10.48", "lessThan": "3.11", "status": "affected", "versionType": "semver"}, {"version": "3.12.25", "lessThan": "3.13", "status": "affected", "versionType": "semver"}, {"version": "3.14.12", "lessThan": "3.15", "status": "affected", "versionType": "semver"}, {"version": "3.15.5", "lessThan": "3.16", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bluetooth/hci_event.c"], "versions": [{"version": "3.16", "status": "affected"}, {"version": "0", "lessThan": "3.16", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.236", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.180", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.113", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.55", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.10.14", "lessThanOrEqual": "6.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.11.3", "lessThanOrEqual": "6.11.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.16", "versionEndExcluding": "5.10.236"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.16", "versionEndExcluding": "5.15.180"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.16", "versionEndExcluding": "6.1.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.16", "versionEndExcluding": "6.6.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.16", "versionEndExcluding": "6.10.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.16", "versionEndExcluding": "6.11.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.16", "versionEndExcluding": "6.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.2.61"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.4.98"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10.48"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.12.25"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.14.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15.5"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/baaa50c6f91ea5a9c7503af51f2bc50e6568b66b"}, {"url": "https://git.kernel.org/stable/c/22b49d6e4f399a390c70f3034f5fbacbb9413858"}, {"url": "https://git.kernel.org/stable/c/d17c631ba04e960eb6f8728b10d585de20ac4f71"}, {"url": "https://git.kernel.org/stable/c/830c03e58beb70b99349760f822e505ecb4eeb7e"}, {"url": "https://git.kernel.org/stable/c/ad7adfb95f64a761e4784381e47bee1a362eb30d"}, {"url": "https://git.kernel.org/stable/c/5291ff856d2c5177b4fe9c18828312be30213193"}, {"url": "https://git.kernel.org/stable/c/b25e11f978b63cb7857890edb3a698599cddb10e"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1229/"}], "title": "Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T22:29:43.667Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-53144", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T21:40:53.978879Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T21:41:46.651Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T22:29:43.667Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-53144", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T21:40:53.978879Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T21:40:54.447Z"}}], "cna": {"title": "Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:A - The vulnerable code path is driven entirely by BR/EDR HCI events generated from an attacker-controlled Bluetooth peer (Connection Request, IO Capability Response, User Confirmation Request), requiring only radio proximity to the target. Per kernel scoring guidance Bluetooth reachability is Adjacent.\nAC:L - The attacker fully controls both parameters that select the vulnerable branch \u2014 its own IO capability (NoInputNoOutput) and authentication requirements (bonding without MITM) \u2014 making the silent auto-accept deterministic with no race, no memory-layout dependency, and no non-default kernel or BlueZ configuration.\nPR:N - The attacker is an entirely unknown, unpaired, unauthenticated remote device with no prior link key; the bug is reached during the initial pairing handshake before any trust relationship exists.\nUI:N - The defect is precisely that the kernel never invokes mgmt_user_confirm_request, so bluetoothd and the user are never consulted and the bond completes silently with no prompt, notification, or action from the victim.\nS:U - The vulnerable component and the compromised resources are the same host under a single security authority; no hypervisor, IOMMU, or sandbox boundary is crossed.\nC:H - The unauthorized persistent bond makes the attacker a trusted device, enabling connections to profiles that expose highly sensitive data (PBAP phonebook and call logs, MAP SMS, OBEX FTP, audio) on phones and automotive head units, and HID keystroke injection escalates this to arbitrary user-level file read.\nI:H - The attacker writes an unauthorized link key into the host's persistent bonding database and can then act as a trusted HID keyboard/mouse to inject keystrokes and execute arbitrary commands as the logged-in user, push files via OPP, or drive the device over AVRCP/HFP.\nA:H - As a bonded peer the attacker can hijack and force-disconnect the legitimate input or audio device \u2014 the same \"speaker hijack or mouse/keyboard hijack\" outcome documented for the related bluedump attack \u2014 and HID command injection permits shutting down or otherwise disabling the system."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "baaa50c6f91ea5a9c7503af51f2bc50e6568b66b", "versionType": "git"}, {"status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "22b49d6e4f399a390c70f3034f5fbacbb9413858", "versionType": "git"}, {"status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "d17c631ba04e960eb6f8728b10d585de20ac4f71", "versionType": "git"}, {"status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "830c03e58beb70b99349760f822e505ecb4eeb7e", "versionType": "git"}, {"status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "ad7adfb95f64a761e4784381e47bee1a362eb30d", "versionType": "git"}, {"status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "5291ff856d2c5177b4fe9c18828312be30213193", "versionType": "git"}, {"status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "lessThan": "b25e11f978b63cb7857890edb3a698599cddb10e", "versionType": "git"}, {"status": "affected", "version": "373d1dfcffc63c68184419264a7eaed422c7958e", "versionType": "git"}, {"status": "affected", "version": "bc96ff59b2f19e924d9e15e24cee19723d674b92", "versionType": "git"}, {"status": "affected", "version": "6ab84785311dc4d0348e6bd4e1c491293b770b98", "versionType": "git"}, {"status": "affected", "version": "778763287ded64dd5c022435d3e0e3182f148a64", "versionType": "git"}, {"status": "affected", "version": "9a5fcacabde0fe11456f4a1e88072c01846cea25", "versionType": "git"}, {"status": "affected", "version": "039da39a616103ec7ab8ac351bfb317854e5507c", "versionType": "git"}, {"status": "affected", "version": "3.2.61", "lessThan": "3.3", "versionType": "semver"}, {"status": "affected", "version": "3.4.98", "lessThan": "3.5", "versionType": "semver"}, {"status": "affected", "version": "3.10.48", "lessThan": "3.11", "versionType": "semver"}, {"status": "affected", "version": "3.12.25", "lessThan": "3.13", "versionType": "semver"}, {"status": "affected", "version": "3.14.12", "lessThan": "3.15", "versionType": "semver"}, {"status": "affected", "version": "3.15.5", "lessThan": "3.16", "versionType": "semver"}], "programFiles": ["net/bluetooth/hci_event.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.16"}, {"status": "unaffected", "version": "0", "lessThan": "3.16", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.236", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.180", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.113", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.55", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.10.14", "versionType": "semver", "lessThanOrEqual": "6.10.*"}, {"status": "unaffected", "version": "6.11.3", "versionType": "semver", "lessThanOrEqual": "6.11.*"}, {"status": "unaffected", "version": "6.12", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/bluetooth/hci_event.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/baaa50c6f91ea5a9c7503af51f2bc50e6568b66b"}, {"url": "https://git.kernel.org/stable/c/22b49d6e4f399a390c70f3034f5fbacbb9413858"}, {"url": "https://git.kernel.org/stable/c/d17c631ba04e960eb6f8728b10d585de20ac4f71"}, {"url": "https://git.kernel.org/stable/c/830c03e58beb70b99349760f822e505ecb4eeb7e"}, {"url": "https://git.kernel.org/stable/c/ad7adfb95f64a761e4784381e47bee1a362eb30d"}, {"url": "https://git.kernel.org/stable/c/5291ff856d2c5177b4fe9c18828312be30213193"}, {"url": "https://git.kernel.org/stable/c/b25e11f978b63cb7857890edb3a698599cddb10e"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1229/"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE\n\nThis aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4\n(\"Bluetooth: Always request for user confirmation for Just Works\")\nalways request user confirmation with confirm_hint set since the\nlikes of bluetoothd have dedicated policy around JUST_WORKS method\n(e.g. main.conf:JustWorksRepairing).\n\nCVE: CVE-2024-8805"}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.236", "versionStartIncluding": "3.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.180", "versionStartIncluding": "3.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.113", "versionStartIncluding": "3.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.55", "versionStartIncluding": "3.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.10.14", "versionStartIncluding": "3.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.11.3", "versionStartIncluding": "3.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12", "versionStartIncluding": "3.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "3.2.61"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "3.4.98"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "3.10.48"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "3.12.25"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "3.14.12"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "3.15.5"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:44:06.956Z"}}}, "cveMetadata": {"cveId": "CVE-2024-53144", "state": "PUBLISHED", "dateUpdated": "2026-10-15T21:41:46.651Z", "dateReserved": "2024-11-19T17:17:24.997Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-12-17T15:55:03.394Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/bluetooth/hci_event.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "baaa50c6f91ea5a9c7503af51f2bc50e6568b66b", "status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "versionType": "git"}, {"lessThan": "22b49d6e4f399a390c70f3034f5fbacbb9413858", "status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "versionType": "git"}, {"lessThan": "d17c631ba04e960eb6f8728b10d585de20ac4f71", "status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "versionType": "git"}, {"lessThan": "830c03e58beb70b99349760f822e505ecb4eeb7e", "status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "versionType": "git"}, {"lessThan": "ad7adfb95f64a761e4784381e47bee1a362eb30d", "status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "versionType": "git"}, {"lessThan": "5291ff856d2c5177b4fe9c18828312be30213193", "status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "versionType": "git"}, {"lessThan": "b25e11f978b63cb7857890edb3a698599cddb10e", "status": "affected", "version": "ba15a58b179ed76a7e887177f2b06de12c58ec8f", "versionType": "git"}, {"status": "affected", "version": "373d1dfcffc63c68184419264a7eaed422c7958e", "versionType": "git"}, {"status": "affected", "version": "bc96ff59b2f19e924d9e15e24cee19723d674b92", "versionType": "git"}, {"status": "affected", "version": "6ab84785311dc4d0348e6bd4e1c491293b770b98", "versionType": "git"}, {"status": "affected", "version": "778763287ded64dd5c022435d3e0e3182f148a64", "versionType": "git"}, {"status": "affected", "version": "9a5fcacabde0fe11456f4a1e88072c01846cea25", "versionType": "git"}, {"status": "affected", "version": "039da39a616103ec7ab8ac351bfb317854e5507c", "versionType": "git"}, {"lessThan": "3.3", "status": "affected", "version": "3.2.61", "versionType": "semver"}, {"lessThan": "3.5", "status": "affected", "version": "3.4.98", "versionType": "semver"}, {"lessThan": "3.11", "status": "affected", "version": "3.10.48", "versionType": "semver"}, {"lessThan": "3.13", "status": "affected", "version": "3.12.25", "versionType": "semver"}, {"lessThan": "3.15", "status": "affected", "version": "3.14.12", "versionType": "semver"}, {"lessThan": "3.16", "status": "affected", "version": "3.15.5", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/bluetooth/hci_event.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.16"}, {"lessThan": "3.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.236", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.180", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.113", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.55", "versionType": "semver"}, {"lessThanOrEqual": "6.10.*", "status": "unaffected", "version": "6.10.14", "versionType": "semver"}, {"lessThanOrEqual": "6.11.*", "status": "unaffected", "version": "6.11.3", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.12", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6EFD13C-6D95-47F0-8F9C-53DD06130790", "versionEndExcluding": "3.3", "versionStartIncluding": "3.2.61", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9CD2D84B-B854-491C-B61F-EDDA1566AF3A", "versionEndExcluding": "3.5", "versionStartIncluding": "3.4.98", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "AEFBF6E4-EDFE-4B47-83FA-927218F54577", "versionEndExcluding": "3.11", "versionStartIncluding": "3.10.48", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A33F5FD8-266F-4755-BC57-5E0051E80026", "versionEndExcluding": "3.13", "versionStartIncluding": "3.12.25", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B992D2D7-0887-4342-A6FA-EACD23F3D869", "versionEndExcluding": "3.15", "versionStartIncluding": "3.14.12", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7AB7F235-CA17-4469-8F49-E61F880EF22E", "versionEndExcluding": "3.16", "versionStartIncluding": "3.15.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "969C4BBD-B3DA-4602-8BC7-D16FA90776F6", "versionEndExcluding": "5.10.236", "versionStartIncluding": "3.16.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D19801C8-3D18-405D-9989-E6C9B30255FA", "versionEndExcluding": "5.15.180", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D01BD22E-ACD1-4618-9D01-6116570BE1EE", "versionEndExcluding": "6.1.113", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E90B9576-56C4-47BC-AAB0-C5B2D438F5D0", "versionEndExcluding": "6.6.55", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4C16BCE0-FFA0-4599-BE0A-1FD65101C021", "versionEndExcluding": "6.10.14", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "54D9C704-D679-41A7-9C40-10A6B1E7FFE9", "versionEndExcluding": "6.11.3", "versionStartIncluding": "6.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:3.16:-:*:*:*:*:*:*", "matchCriteriaId": "18374217-75DB-4E06-8293-8AAC0FD9D6C2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:3.16:rc3:*:*:*:*:*:*", "matchCriteriaId": "00980113-0C5C-44CF-B912-5A45F1618260", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:3.16:rc4:*:*:*:*:*:*", "matchCriteriaId": "9BBC595E-C5BC-4F00-8225-DF0A63C245CA", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:3.16:rc5:*:*:*:*:*:*", "matchCriteriaId": "B7B44985-192D-4FF6-9E98-793433D6343F", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:3.16:rc6:*:*:*:*:*:*", "matchCriteriaId": "8189E203-92F1-4AF9-A3B5-F97746EBB8EF", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:3.16:rc7:*:*:*:*:*:*", "matchCriteriaId": "AFC935DE-1793-40AC-BE91-C89CB827985D", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*", "matchCriteriaId": "7F361E1D-580F-4A2D-A509-7615F73167A1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE\n\nThis aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4\n(\"Bluetooth: Always request for user confirmation for Just Works\")\nalways request user confirmation with confirm_hint set since the\nlikes of bluetoothd have dedicated policy around JUST_WORKS method\n(e.g. main.conf:JustWorksRepairing).\n\nCVE: CVE-2024-8805"}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: hci_event: Alinear el emparejamiento de BR/EDR JUST_WORKS con LE Esto aline\u00f3 el m\u00e9todo BR/EDR JUST_WORKS con LE, que desde 92516cd97fd4 (\"Bluetooth: Siempre solicitar confirmaci\u00f3n del usuario para Just Works\") siempre solicita confirmaci\u00f3n del usuario con confirm_hint configurado, ya que bluetoothd tiene una pol\u00edtica dedicada en torno al m\u00e9todo JUST_WORKS (por ejemplo, main.conf:JustWorksRepairing). CVE: CVE-2024-8805"}], "id": "CVE-2024-53144", "lastModified": "2026-10-15T22:18:00.890", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-53144", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-15T21:40:53.978879Z", "version": "2.0.3"}}]}, "published": "2024-12-17T16:15:25.797", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/22b49d6e4f399a390c70f3034f5fbacbb9413858"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5291ff856d2c5177b4fe9c18828312be30213193"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/830c03e58beb70b99349760f822e505ecb4eeb7e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ad7adfb95f64a761e4784381e47bee1a362eb30d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b25e11f978b63cb7857890edb3a698599cddb10e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/baaa50c6f91ea5a9c7503af51f2bc50e6568b66b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d17c631ba04e960eb6f8728b10d585de20ac4f71"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1229/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE", "id": "2332853", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2332853"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-20", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE\nThis aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4\n(\"Bluetooth: Always request for user confirmation for Just Works\")\nalways request user confirmation with confirm_hint set since the\nlikes of bluetoothd have dedicated policy around JUST_WORKS method\n(e.g. main.conf:JustWorksRepairing).\nCVE: CVE-2024-8805"], "name": "CVE-2024-53144", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-12-17T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-53144\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-53144\nhttps://lore.kernel.org/linux-cve-announce/2024121709-CVE-2024-53144-ee57@gregkh/T"], "threat_severity": "Moderate"}

{"created": "2025-07-12T23:06:21.627642+00:00", "updated": "2025-07-12T23:06:21.627697+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}