What is CVE-2024-56757?

CVE-2024-56757 is a high-severity vulnerability in Linux, classified under Improper Resource Shutdown or Release. CVSS score: 7.8/10. Published 2025-01-06.

How severe is CVE-2024-56757?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux

CVE-2024-56757

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: add intf release flow when usb disconnect MediaTek claim an special usb intr interface for ISO data transmission. The interface need to be released before unregistering hci device when usb disconnect. Removing BT usb dongle without properly releasing the interface may cause Kernel panic while unregister hci device.

EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions ceac1cb0259de682d78f5c784ef8e0b13022e9d9, 6.11, 0
Linux Linux_kernel

Weakness classification (CWE)

CWE-404 — Improper Resource Shutdown or Release

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-56757?: CVE-2024-56757 is a high-severity vulnerability in Linux, classified under Improper Resource Shutdown or Release. CVSS score: 7.8/10. Published 2025-01-06.
How severe is CVE-2024-56757?: High severity. CVSS v3 base score is 7.8 out of 10.