UnratedFix available
linux-lowlatency-hwe-6.5 vulnerabilities
Type: advisorySources: OSV
It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859) Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)
- Products
- linux-lowlatency-hwe-6.5
- Affected versions
- 6.5.0-14.14.1~22.04.1, 6.5.0-15.15.1.1~22.04.1, 6.5.0-17.17.1.1.1~22.04.1, 6.5.0-21.21.1~22.04.1, 6.5.0-25.25.1~22.04.1, 6.5.0-26.26.1~22.04.1, 6.5.0-27.28.1~22.04.1, 6.5.0-28.29.1~22.04.1, 6.5.0-35.35.1~22.04.1, 6.5.0-41.41.1~22.04.1, 6.5.0-42.42.1~22.04.1, 6.5.0-44.44.1~22.04.1
- Fixed versions
- 6.5.0-45.45.1~22.04.1
- CVEs
- CVE-2024-24857, CVE-2024-24858, CVE-2024-24859, CVE-2024-25739
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 19:30 UTC · Revision 1
Source evidence
It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859) Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)
osv:USN-6922-2
linux-lowlatency-hwe-6.5
Fixed versions: 6.5.0-45.45.1~22.04.1
Complete source record
{
"id": "0d52601f5baef7a09004075631226d0e531506ac416fc2d8bbdfa502b6105105",
"url": "https://osv.dev/vulnerability/USN-6922-2",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "linux-lowlatency-hwe-6.5 vulnerabilities",
"summary": "It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859) Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)",
"evidence": "osv:USN-6922-2",
"products": [
{
"name": {
"value": "linux-lowlatency-hwe-6.5",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "6.5.0-45.45.1~22.04.1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "6.5.0-14.14.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-15.15.1.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-17.17.1.1.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-21.21.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-25.25.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-26.26.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-27.28.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-28.29.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-35.35.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-41.41.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-42.42.1~22.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "6.5.0-44.44.1~22.04.1",
"evidence": "/affected/0/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "USN-6922-2",
"aliases": [
"USN-6922-2"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.5.0-45.45.1~22.04.1"
}
]
}
],
"package": {
"name": "linux-lowlatency-hwe-6.5",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.5?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"6.5.0-14.14.1~22.04.1",
"6.5.0-15.15.1.1~22.04.1",
"6.5.0-17.17.1.1.1~22.04.1",
"6.5.0-21.21.1~22.04.1",
"6.5.0-25.25.1~22.04.1",
"6.5.0-26.26.1~22.04.1",
"6.5.0-27.28.1~22.04.1",
"6.5.0-28.29.1~22.04.1",
"6.5.0-35.35.1~22.04.1",
"6.5.0-41.41.1~22.04.1",
"6.5.0-42.42.1~22.04.1",
"6.5.0-44.44.1~22.04.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6922-2.json",
"cves_map": {
"cves": [
{
"id": "CVE-2024-24857",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2024-24858",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2024-24859",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2024-25739",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-common",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-common",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-host",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
}
],
"availability": "No subscription required"
}
}
],
"modified": "2026-10-22T23:19:22.056531823Z",
"provider": "osv",
"upstream": [
"CVE-2024-24857",
"CVE-2024-24858",
"CVE-2024-24859",
"CVE-2024-25739",
"UBUNTU-CVE-2024-24857",
"UBUNTU-CVE-2024-24858",
"UBUNTU-CVE-2024-24859",
"UBUNTU-CVE-2024-25739"
],
"references": [
"https://ubuntu.com/security/notices/USN-6922-2",
"https://ubuntu.com/security/CVE-2024-24857",
"https://ubuntu.com/security/CVE-2024-24858",
"https://ubuntu.com/security/CVE-2024-24859",
"https://ubuntu.com/security/CVE-2024-25739"
]
},
"related_cves": [
{
"value": "CVE-2024-24857",
"evidence": "/upstream"
},
{
"value": "CVE-2024-24858",
"evidence": "/upstream"
},
{
"value": "CVE-2024-24859",
"evidence": "/upstream"
},
{
"value": "CVE-2024-25739",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 410104,
"published_at": "2024-08-01T13:39:54+00:00"
}