What’s Vulnerable › Vulnerabilities

CVE-2024-56757: Bluetooth: btusb: mediatek: add intf release flow when usb disconnect

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-06 · updated 2026-08-04
• Weakness: CWE-404

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: add intf release flow when usb disconnect MediaTek claim an special usb intr interface for ISO data transmission. The interface need to be released before unregistering hci device when usb disconnect. Removing BT usb dongle without properly releasing the interface may cause Kernel panic while unregister hci device.

Affected products

• Linux kernel: before 6.12.8 — fixed in 6.12.8

How to fix

Upgrade to a fixed version: Linux kernel 6.12.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/489304e67087abddc2666c5af0159cb95afdcf59
• https://git.kernel.org/stable/c/cc569d791ab2a0de74f76e470515d25d24c9b84b

Get alerted when CVE-2024-56757 or the next vulnerability affects your stack