01 Record

CVE-2024-26801

Bluetooth: Avoid potential use-after-free in hci_error_reset

HighPUBLISHEDCNA: Linux

CNA base score8.8 CVSS v3.xCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

Bluetooth: Avoid potential use-after-free in hci_error_reset

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.42% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 35.1% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-04-04 08:20Z2 YR AGO

Last updated

2026-08-05 11:27Z1 MO AGO

Reserved

2024-02-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant
CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

13720af4025a9e6f4411028fdbbda98412a54b0242116ab117869c5cf6644b09

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc7741d16a57cbf97eebe53f27e8216b1ff20e20c to < e0b278650f07acf2e0932149183458468a731c03, c7741d16a57cbf97eebe53f27e8216b1ff20e20c to < 98fb98fd37e42fd4ce13ff657ea64503e24b6090, c7741d16a57cbf97eebe53f27e8216b1ff20e20c to < 6dd0a9dfa99f8990a08eb8fdd8e79bee31c7d8e2, c7741d16a57cbf97eebe53f27e8216b1ff20e20c to < da4569d450b193e39e87119fd316c0291b585d14, c7741d16a57cbf97eebe53f27e8216b1ff20e20c to < 45085686b9559bfbe3a4f41d3d695a520668f5e1, c7741d16a57cbf97eebe53f27e8216b1ff20e20c to < 2ab9a19d896f5a0dd386e1f001c5309bc35f433b, c7741d16a57cbf97eebe53f27e8216b1ff20e20c to < dd594cdc24f2e48dab441732e6dfcafd6b0711d1, c7741d16a57cbf97eebe53f27e8216b1ff20e20c to < 2449007d3f73b2842c9734f45f0aadb522daf592, 4.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e0b278650f07acf2e0932149183458468a731c03
git.kernel.orghttps://git.kernel.org/stable/c/98fb98fd37e42fd4ce13ff657ea64503e24b6090
git.kernel.orghttps://git.kernel.org/stable/c/6dd0a9dfa99f8990a08eb8fdd8e79bee31c7d8e2
git.kernel.orghttps://git.kernel.org/stable/c/da4569d450b193e39e87119fd316c0291b585d14
git.kernel.orghttps://git.kernel.org/stable/c/45085686b9559bfbe3a4f41d3d695a520668f5e1
git.kernel.orghttps://git.kernel.org/stable/c/2ab9a19d896f5a0dd386e1f001c5309bc35f433b
git.kernel.orghttps://git.kernel.org/stable/c/dd594cdc24f2e48dab441732e6dfcafd6b0711d1
git.kernel.orghttps://git.kernel.org/stable/c/2449007d3f73b2842c9734f45f0aadb522daf592
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

01 Record index

CVE-2024-26801

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-26801

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References