CVE-2024-57987 Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()
A missing NULL check in the Linux kernel Bluetooth driver allows a local attacker to cause a kernel crash by inserting an unsupported USB dongle.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-57987?
CVE-2024-57987 is a medium-severity vulnerability in Linux kernel, published on 27 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()
If insert an USB dongle which chip is not maintained in ic_id_table, it will hit the NULL point accessed. Add a null point check to avoid the Kernel Oops.
Weakness: CWE-476
Which versions are affected by CVE-2024-57987?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-57987?
Apply the vendor's patch.
Is CVE-2024-57987 being exploited?
There is no known exploitation of CVE-2024-57987 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-57987, DEBIAN-CVE-2024-57987, GHSA-5qcv-cchc-8x29, UBUNTU-CVE-2024-57987.