CVE-2024-58241: Bluetooth: hci_core: Disable works on hci_unregister_dev

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-24 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Disable works on hci_unregister_dev This make use of disable_work_* on hci_unregister_dev since the hci_dev is about to be freed new submissions are not disarable.

Affected products

Linux kernel: from 4.19.319 before 4.20; from 5.4.281 before 5.5; from 5.10.223 before 5.11; from 5.15.164 before 5.16; from 6.1.101 before 6.2; from 6.6.42 before 6.7 — fixed in 4.20, 5.11, 5.16, 5.5, 6.10, 6.11.6

How to fix

Upgrade to a fixed version: Linux kernel 4.20, 5.11, 5.16, 5.5. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-58241 or the next vulnerability affects your stack