CVE-2024-58009: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-58009 is a vulnerability in the Linux kernel's Bluetooth L2CAP (Logical Link Control and Adaptation Protocol) subsystem, specifically in the l2capsockalloc function. The vulnerability was discovered by the Linux Verification Center (linuxtesting.org) using the SVACE static analysis tool and was disclosed in December 2024 (Kernel Git).

The vulnerability occurs when a NULL sock pointer is passed into l2capsockalloc() when called from l2capsocknewconnectioncb(). The error handling paths were not properly handling this NULL pointer case. While an alternative solution could have been to swap btsockalloc() and l2capchancreate() calls, this would have introduced potential issues with the global list accessibility (Kernel Git).

The vulnerability could potentially lead to system instability or crashes when handling Bluetooth L2CAP socket allocation errors. This affects the Linux kernel's Bluetooth subsystem and could impact systems using Bluetooth functionality (NVD).

A fix has been implemented that adds a NULL pointer check before accessing the sock pointer in the error handling path. The patch has been merged into the Linux kernel and is being backported to stable kernel versions (Kernel Git).