CVE-2024-8805

Name	CVE-2024-8805
Description	BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-4008-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bullseye	5.10.223-1	vulnerable
	bullseye (security)	5.10.244-1	vulnerable
	bookworm	6.1.148-1	fixed
	bookworm (security)	6.1.158-1	fixed
	trixie	6.12.43-1	fixed
	trixie (security)	6.12.48-1	fixed
	forky	6.16.12-2	fixed
	sid	6.17.7-2	fixed
linux-6.1 (PTS)	bullseye (security)	6.1.153-1~deb11u1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
linux	source	bookworm	6.1.115-1
linux	source	(unstable)	6.11.4-1
linux-6.1	source	bullseye	6.1.119-1~deb11u1	DLA-4008-1

Notes

https://www.zerodayinitiative.com/advisories/ZDI-24-1229/
https://git.kernel.org/linus/b25e11f978b63cb7857890edb3a698599cddb10e (6.12-rc2)
CVE-2024-8805 likely to be rejected as Linux kernel CNA assigned later CVE-2024-53144