What is CVE-2024-38620?

CVE-2024-38620 is a high-severity vulnerability in Linux. CVSS score: 8.8/10. Published 2024-06-20.

How severe is CVE-2024-38620?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Linux

CVE-2024-38620

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCI_AMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no longer need to differentiate between AMP and Primary controllers, as only HCI_PRIMARY is left, this also remove hdev->dev_type altogether.

EPSS: 0.003 (23.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 244bc377591c3882f454882357bc730c90cbedb5, 4.3, 0
Linux Linux_kernel

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-38620?: CVE-2024-38620 is a high-severity vulnerability in Linux. CVSS score: 8.8/10. Published 2024-06-20.
How severe is CVE-2024-38620?: High severity. CVSS v3 base score is 8.8 out of 10.