VYPR
High severity7.6NVD Advisory· Published Jul 30, 2024· Updated Aug 4, 2026

CVE-2024-42132

CVE-2024-42132

Description

In the Linux kernel, the following vulnerability has been resolved:

bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX

Syzbot hit warning in hci_conn_del() caused by freeing handle that was not allocated using ida allocator.

This is caused by handle bigger than HCI_CONN_HANDLE_MAX passed by hci_le_big_sync_established_evt(), which makes code think it's unset connection.

Add same check for handle upper bound as in hci_conn_set_handle() to prevent warning.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

59

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.