CVE-2024-42141: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-42141 affects the Linux kernel's Bluetooth ISO implementation. The vulnerability was discovered in July 2024 and involves a NULL pointer dereference issue in the net/bluetooth/iso.c file. The vulnerability affects Linux kernel versions from 6.5.12 up to (excluding) 6.6, from 6.6 up to (excluding) 6.6.39, from 6.7 up to (excluding) 6.9.9, and various 6.10 release candidates (NVD).

The vulnerability stems from improper handling of the HCI connection pointer (hcon) in the iso_sock_recvmsg() function within the Bluetooth ISO subsystem. The Smatch static checker identified that the code assumes 'pi->conn->hcon' could be null at line 1359, but then attempts to use it at line 1364, potentially leading to a NULL pointer dereference. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (Kernel Patch).

The vulnerability can lead to a denial of service condition through a NULL pointer dereference in the Linux kernel's Bluetooth ISO implementation. This could potentially affect system stability and availability for systems using the affected Bluetooth functionality (NVD).

The vulnerability requires local access with low privileges and no user interaction to exploit. The attack complexity is low, making it relatively straightforward to trigger the vulnerability if an attacker has the necessary local access (NVD).

The vulnerability has been patched by modifying the code to check the socket flag (BT_SK_PA_SYNC) instead of the HCI connection pointer. The fix is available in the kernel patch that changes the condition from checking 'pi->conn->hcon && test_bit(HCI_CONN_PA_SYNC, &pi->conn->hcon->flags)' to checking 'test_bit(BT_SK_PA_SYNC, &pi->flags)' (Kernel Patch).