Threats tagged 'ghsa-vmr8-6pr2-r534'

CVE-2024-42137 addresses a Bluetooth driver issue in the Linux kernel affecting QCA6390 devices. A regression introduced by a previous commit caused Bluetooth to fail enabling after a warm reboot if certain device tree or ACPI properties were not configured. The flaw relates to improper handling of the serdev interface during shutdown, leading to Bluetooth enable failure. The issue was fixed by modifying the driver to send a vendor-specific command (VSC) to the reset controller during shutdown, resolving both the regression and a use-after-free vulnerability.