CVE-2024-58238

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test

This fixes the tx timeout issue seen while running a stress test on

btnxpuart for couple of hours, such that the interval between two HCI

commands coincide with the power save timeout value of 2 seconds.

Test procedure using bash script:

<load btnxpuart.ko>

hciconfig hci0 up

//Enable Power Save feature

hcitool -i hci0 cmd 3f 23 02 00 00

while (true)

do

hciconfig hci0 leadv

sleep 2

hciconfig hci0 noleadv

sleep 2

done

Error log, after adding few more debug prints:

Bluetooth: btnxpuart_queue_skb(): 01 0A 20 01 00

Bluetooth: hci0: Set UART break: on, status=0

Bluetooth: hci0: btnxpuart_tx_wakeup() tx_work scheduled

Bluetooth: hci0: btnxpuart_tx_work() dequeue: 01 0A 20 01 00

Can't set advertise mode on hci0: Connection timed out (110)

Bluetooth: hci0: command 0x200a tx timeout

When the power save mechanism turns on UART break, and

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References