Security tracker / CVE-2024-8805

CVE-2024-8805

Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

References

• Debian security tracker
• cve.org
• https://www.zerodayinitiative.com/advisories/ZDI-24-1229/

Notes

 carnil> Commit fixes ba15a58b179e ("Bluetooth: Fix SSP acceptor just-
 carnil> works confirmation without MITM").
 carnil> CVE-2024-8805 likely to be rejected as Linux kernel CNA
 carnil> assigned later CVE-2024-53144

Bugs

Status

Branch	Status
upstream	released (6.12-rc2) [b25e11f978b63cb7857890edb3a698599cddb10e]
6.18-upstream-stable
6.17-upstream-stable
6.12-upstream-stable
6.11-upstream-stable	released (6.11.3) [5291ff856d2c5177b4fe9c18828312be30213193]
6.10-upstream-stable	released (6.10.14) [ad7adfb95f64a761e4784381e47bee1a362eb30d]
6.6-upstream-stable	released (6.6.55) [830c03e58beb70b99349760f822e505ecb4eeb7e]
6.1-upstream-stable	released (6.1.113) [d17c631ba04e960eb6f8728b10d585de20ac4f71]
5.10-upstream-stable	needed
sid	released (6.11.4-1)
6.12-trixie-security
6.1-bookworm-security	released (6.1.115-1)
5.10-bullseye-security	needed