---
id: CVE-2024-53144
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

  This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4
  ("Bluetooth: Always request for use…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

  This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4
  ("Bluetooth: Always request for use…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 3.2.61, < 3.3'
  - 'linux_kernel >= 3.4.98, < 3.5'
  - 'linux_kernel >= 3.10.48, < 3.11'
  - 'linux_kernel >= 3.12.25, < 3.13'
  - 'linux_kernel >= 3.14.12, < 3.15'
  - 'linux_kernel >= 3.15.5, < 3.16'
  - 'linux_kernel >= 3.16.1, < 5.10.236'
  - 'linux_kernel >= 5.11, < 5.15.180'
  - 'linux_kernel >= 5.16, < 6.1.113'
  - 'linux_kernel >= 6.2, < 6.6.55'
  - 'linux_kernel >= 6.7, < 6.10.14'
  - 'linux_kernel >= 6.11, < 6.11.3'
  - linux_kernel = 3.16
  - linux_kernel = 6.12
patched:
  - linux_kernel 6.11.3
published: '2024-12-17'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:18:00.890'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-53144'
references:
  - url: 'https://git.kernel.org/stable/c/22b49d6e4f399a390c70f3034f5fbacbb9413858'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5291ff856d2c5177b4fe9c18828312be30213193'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/830c03e58beb70b99349760f822e505ecb4eeb7e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ad7adfb95f64a761e4784381e47bee1a362eb30d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b25e11f978b63cb7857890edb3a698599cddb10e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/baaa50c6f91ea5a9c7503af51f2bc50e6568b66b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d17c631ba04e960eb6f8728b10d585de20ac4f71'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://www.zerodayinitiative.com/advisories/ZDI-24-1229/'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
epss: 0.00419
epssPercentile: 0.36027
zeroDay: true
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:40:53.978879Z'
ingestedAt: '2026-10-15T22:48:25.442Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4
("Bluetooth: Always request for user confirmation for Just Works")
always request user confirmation with confirm_hint set since the
likes of bluetoothd have dedicated policy around JUST_WORKS method
(e.g. main.conf:JustWorksRepairing).

CVE: CVE-2024-8805

## Affected

- `linux_kernel >= 3.2.61, < 3.3`
- `linux_kernel >= 3.4.98, < 3.5`
- `linux_kernel >= 3.10.48, < 3.11`
- `linux_kernel >= 3.12.25, < 3.13`
- `linux_kernel >= 3.14.12, < 3.15`
- `linux_kernel >= 3.15.5, < 3.16`
- `linux_kernel >= 3.16.1, < 5.10.236`
- `linux_kernel >= 5.11, < 5.15.180`
- `linux_kernel >= 5.16, < 6.1.113`
- `linux_kernel >= 6.2, < 6.6.55`
- `linux_kernel >= 6.7, < 6.10.14`
- `linux_kernel >= 6.11, < 6.11.3`
- `linux_kernel = 3.16`
- `linux_kernel = 6.12`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.11.3`