From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id EC878154457; Wed, 18 Dec 2024 06:52:41 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1734504762; cv=none; b=qKYuBU9WM2WnmQix0zAyiRXsFrXMYPaQMkMy6pNSu1X/2AmBw2PHjf/LiklNdhub3p9GJuBglYn88DKOO4LoBV/A7rvfVSmZK3TQZ1G+liwOchfdf6+/IJtOqq1uZBIlngNShwBcvzYHaMtllUMEmB/ShM/VpND3+5mHBLTglY0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1734504762; c=relaxed/simple; bh=V6h1eTO4DtzVbcQ5x7qDXTfpKDfVAfXILJ0Iig1ohKE=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=UXJbV0KwlOrSnBdXLV4zh0GJuRnPvpoARJS7LCEkXLGFvGGRWQYH+uodP5QqvkH8i6Vm82xCLeRWem/ULAl1lQbMVS9ly/W3B7G6kFMtGfb0lSLSZb4lLIgHmIIFaK8GTQ1A5CSFRMy9izBCsXfJ7k9TQkxuYHKPgV+X4QxuTJ8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=JG9GI31O; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="JG9GI31O" Received: by smtp.kernel.org (Postfix) with ESMTPSA id D8226C4CECE; Wed, 18 Dec 2024 06:52:40 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1734504761; bh=V6h1eTO4DtzVbcQ5x7qDXTfpKDfVAfXILJ0Iig1ohKE=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=JG9GI31OiTG1X9Jv/7sT2AufJzq/wVacWAG7oaVQgiuuK3nzrr1xJuHqJ349CLnj0 W6m3t/7UBj79YQ6hV7X0NbF0W4lWb7MufapzmuzzJOXqG8hFMibv+jp0MuY9q8UeOd JYVembNrWJCN3voQ5CkVc8A7nxcDht/V4Nfz4zyI= Date: Tue, 17 Dec 2024 19:24:35 +0100 From: Greg Kroah-Hartman To: Salvatore Bonaccorso Cc: cve@kernel.org, linux-kernel@vger.kernel.org, linux-cve-announce@vger.kernel.org Subject: Re: CVE-2024-53144: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE Message-ID: <2024121711-appetite-monsoon-eed6@gregkh> References: <2024121709-CVE-2024-53144-ee57@gregkh> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: On Tue, Dec 17, 2024 at 06:07:40PM +0100, Salvatore Bonaccorso wrote: > Hi Greg, > > On Tue, Dec 17, 2024 at 04:55:10PM +0100, Greg Kroah-Hartman wrote: > > Description > > =========== > > > > In the Linux kernel, the following vulnerability has been resolved: > > > > Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE > > > > This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4 > > ("Bluetooth: Always request for user confirmation for Just Works") > > always request user confirmation with confirm_hint set since the > > likes of bluetoothd have dedicated policy around JUST_WORKS method > > (e.g. main.conf:JustWorksRepairing). > > > > CVE: CVE-2024-8805 > > > > The Linux kernel CVE team has assigned CVE-2024-53144 to this issue. > > > > > > Affected and fixed versions > > =========================== > > > > Issue introduced in 3.16 with commit ba15a58b179e and fixed in 6.1.113 with commit d17c631ba04e > > Issue introduced in 3.16 with commit ba15a58b179e and fixed in 6.6.55 with commit 830c03e58beb > > Issue introduced in 3.16 with commit ba15a58b179e and fixed in 6.10.14 with commit ad7adfb95f64 > > Issue introduced in 3.16 with commit ba15a58b179e and fixed in 6.11.3 with commit 5291ff856d2c > > Issue introduced in 3.16 with commit ba15a58b179e and fixed in 6.12 with commit b25e11f978b6 > > Issue introduced in 3.2.61 with commit 373d1dfcffc6 > > Issue introduced in 3.4.98 with commit bc96ff59b2f1 > > Issue introduced in 3.10.48 with commit 6ab84785311d > > Issue introduced in 3.12.25 with commit 778763287ded > > Issue introduced in 3.14.12 with commit 9a5fcacabde0 > > Issue introduced in 3.15.5 with commit 039da39a6161 > > > > Please see https://www.kernel.org for a full list of currently supported > > kernel versions by the kernel community. > > > > Unaffected versions might change over time as fixes are backported to > > older supported kernel versions. The official CVE entry at > > https://cve.org/CVERecord/?id=CVE-2024-53144 > > will be updated if fixes are backported, please check that for the most > > up to date information about this issue. > > > > > > Affected files > > ============== > > > > The file(s) affected by this issue are: > > net/bluetooth/hci_event.c > > > > > > Mitigation > > ========== > > > > The Linux kernel CVE team recommends that you update to the latest > > stable kernel version for this, and many other bugfixes. Individual > > changes are never tested alone, but rather are part of a larger kernel > > release. Cherry-picking individual commits is not recommended or > > supported by the Linux kernel community at all. If however, updating to > > the latest release is impossible, the individual changes to resolve this > > issue can be found at these commits: > > https://git.kernel.org/stable/c/d17c631ba04e960eb6f8728b10d585de20ac4f71 > > https://git.kernel.org/stable/c/830c03e58beb70b99349760f822e505ecb4eeb7e > > https://git.kernel.org/stable/c/ad7adfb95f64a761e4784381e47bee1a362eb30d > > https://git.kernel.org/stable/c/5291ff856d2c5177b4fe9c18828312be30213193 > > https://git.kernel.org/stable/c/b25e11f978b63cb7857890edb3a698599cddb10e > > I asume that https://www.zerodayinitiative.com/advisories/ZDI-24-1229/ > back then which has referenced CVE-2024-8805 is cosindered invalid > right? > > Cc'ing zdi@trendmicro.com Yes, ZDI has been asked to reject the CVE that they created against the Linux project, as they are not allowed to do that. thanks, greg k-h