CVE-2024-58241: Bluetooth: hci_core: Disable works on hci_unregister_dev

CVE-2024-58241 PUBLISHED CVSS 7.8 HIGH

Bluetooth: hci_core: Disable works on hci_unregister_dev

Reported by linux · Published September 24, 2025

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Disable works on hci_unregister_dev This make use of disable_work_* on hci_unregister_dev since the hci_dev is about to be freed new submissions are not disarable.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
Linux	Linux	cfdb13a54e05eb98d9940cb6d1a13e7f994d811f, 989fa5171f005ecf63440057218d8aeb1795287d, 6.10, 6.7, 6.2, 5.16, 5.11, 5.5, 4.20

Risk scores

CVSS 3.1

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Linux	Linux	0d151a103775dd9645c78c97f77d6e2a5298d913, 0d151a103775dd9645c78c97f77d6e2a5298d913, 48542881997e17b49dc16b93fe910e0cfcf7a9f9
Linux	Linux	6.10, 0, 6.11.6
Linux	Linux	6.9.11, 9cfc84b1d464cc024286f42a090718f9067b80ed, 3f939bd73fed12dddc2a32a76116c19ca47c7678
linux	linux_kernel	5.15.164, 6.1.101, 6.9.11

Timeline

Sep 24, 2025 EPSS Score (30 in total, the first dated here)
Sep 24, 2025 CVE Published
Oct 3, 2025 Coalition ESS Score (19 in total, the first dated here)
Dec 29, 2025 Security Advisory (21 in total, the first dated here)
Dec 29, 2025 CVE Updated
Sep 21, 2026 Distribution Patch (17 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-58241
vulnetix vdb fixes CVE-2024-58241

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-58241/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →