CVE-2024-24857

What it actually does

Race condition in net/bluetooth conn_info_{min,max}_age_set() allows integrity overflow leading to abnormal Bluetooth connections or denial of service.

Why it matters to the business

Disruption of Bluetooth-dependent operations on Linux systems, potential service outages in environments using wireless peripherals, with low immediate urgency given stable low exploit probability and absence from known campaigns.

How an attack unfolds

An attacker positioned on the same network segment triggers concurrent calls to the age-set functions during connection setup, exploiting the race to overflow internal state and force connection reset or kernel-level denial of service; no named threat actors are associated with this specific flaw.

How to fix it

Update to a patched Linux kernel version that resolves the race condition in the Bluetooth driver; monitor vendor advisories for backported fixes since no fixed versions are listed for the affected packages.

How to confirm the fix worked

Verify kernel source or package version contains the fix for the conn_info age race; test Bluetooth connection establishment under concurrent load to confirm absence of overflow behavior.

Typical attack path

1. Gain adjacent network access to a target Linux system with Bluetooth enabled
2. Initiate multiple rapid Bluetooth connection attempts to trigger the race window in conn_info age handling
3. Cause integrity overflow resulting in connection failure or system instability

How to detect it

Review kernel logs for Bluetooth driver errors or connection resets coinciding with high connection attempt rates; no specific threat actor indicators apply.

What your security team should do

• Prioritize kernel updates on systems with Bluetooth enabled
• Disable Bluetooth where not required to reduce attack surface
• Monitor EPSS and KEV status for any future changes in exploit availability