This vulnerability (CVE-2024-22099) is a NULL Pointer Dereference (CWE-476) in the Linux kernel version 2.6.12-rc2, affecting the net and bluetooth modules, particularly the rfcomm core component. The flaw can lead to buffer overflows, potentially causing denial of service by crashing the kernel or disrupting normal operation. The issue is present in the kernel source file /net/bluetooth/rfcomm/core.C. The CVSS 3.1 base score of 6.3 reflects a medium severity with network attack vector and high attack complexity, requiring low privileges and no user interaction, impacting availability but not confidentiality or integrity. There is no indication of known exploitation in the wild or available patches at this time.

The vulnerability can cause denial of service by triggering a NULL pointer dereference and buffer overflow in the Linux kernel's bluetooth rfcomm module. It does not impact confidentiality or integrity but can disrupt system availability. The affected version is Linux kernel v2.6.12-rc2. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor channels for updates. Until a fix is available, avoid exposing vulnerable kernel versions in untrusted network environments and consider disabling affected bluetooth modules if feasible.