CVE-2024-42132EPSS p19.6%
CVE-2024-42132CVE-2024-42132
linux / linux_kernel
Description
In the Linux kernel, the following vulnerability has been resolved:
bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
Syzbot hit warning in hci_conn_del() caused by freeing handle that was
not allocated using ida allocator.
This is caused by handle bigger than HCI_CONN_HANDLE_MAX passed by
hci_le_big_sync_established_evt(), which makes code think it's unset
connection.
Add same check for handle upper bound as in hci_conn_set_handle() to
prevent warning.
Scoring
| CVSS | 7.6 () |
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
| EPSS | 0.29% probability of exploitation · percentile 19.6% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-04 |