This vulnerability (CVE-2024-36013) in the Linux kernel affects the Bluetooth L2CAP layer, specifically in the l2cap_connect() function. A slab-use-after-free occurs due to improper synchronization around the channel object lifecycle, where the channel can be freed while still referenced, leading to a use-after-free condition. The patch extends the critical section protecting the channel and modifies the function to return void, preventing use of a potentially freed pointer. The issue was detected by KASAN (Kernel Address Sanitizer) and involves a read of freed memory. This vulnerability is classified under CWE-416 (Use After Free).

Successful exploitation could lead to memory corruption in the kernel Bluetooth stack, potentially causing system instability, crashes, or privilege escalation. The CVSS vector indicates the attack requires local access with low privileges and user interaction, with high impact on confidentiality, integrity, and availability.

A fix is available that extends the critical section in the l2cap_connect() function to prevent early freeing of the channel object and changes the function return type to void to avoid returning pointers to freed memory. Users should apply the official Linux kernel patches that address CVE-2024-36013. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the latest patch and backport information.