Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-53144 Details

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4 ("Bluetooth: Always request for user confirmation for Just Works") always request user confirmation with confirm_hint set since the likes of bluetoothd have dedicated policy around JUST_WORKS method (e.g. main.conf:JustWorksRepairing). CVE: CVE-2024-8805

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA: kernel.orgCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/22b49d6e4f399a390c70f3034f5fbacbb9413858 kernel.orgPatch
https://git.kernel.org/stable/c/5291ff856d2c5177b4fe9c18828312be30213193 kernel.orgPatch
https://git.kernel.org/stable/c/830c03e58beb70b99349760f822e505ecb4eeb7e kernel.orgPatch
https://git.kernel.org/stable/c/ad7adfb95f64a761e4784381e47bee1a362eb30d kernel.orgPatch
https://git.kernel.org/stable/c/b25e11f978b63cb7857890edb3a698599cddb10e kernel.orgPatch

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 3.2.61, < 3.3
>= 3.4.98, < 3.5
>= 3.10.48, < 3.11
>= 3.12.25, < 3.13
>= 3.14.12, < 3.15

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.16:-:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.16:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.16:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.16:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.16:rc6:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.16:rc7:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-53144
NVD Published Date:
Dec 17, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-53144 Details - Not Deferred