CVE-2024-53238

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btmtk: adjust the position to init iso data anchor

MediaTek iso data anchor init should be moved to where MediaTek

claims iso data interface.

If there is an unexpected BT usb disconnect during setup flow,

it will cause a NULL pointer crash issue when releasing iso

anchor since the anchor wasn't been init yet. Adjust the position

to do iso data anchor init.

[ 17.137991] pc : usb_kill_anchored_urbs+0x60/0x168

[ 17.137998] lr : usb_kill_anchored_urbs+0x44/0x168

[ 17.137999] sp : ffffffc0890cb5f0

[ 17.138000] x29: ffffffc0890cb5f0 x28: ffffff80bb6c2e80

[ 17.144081] gpio gpiochip0: registered chardev handle for 1 lines

[ 17.148421] x27: 0000000000000000

[ 17.148422] x26: ffffffd301ff4298 x25: 0000000000000003 x24: 00000000000000f0

[ 17.148424] x23: 0000000000000000 x22: 00000000ffffffff x21: 0000000000000001

[ 17.148425] x20: ffffffffffffffd8 x19: ffffff80c0f25560 x18: 0000000000000000

[ 1

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References