Answer in brief
CVE-2024-49951 records a Unknown severity vulnerability in Bluetooth: MGMT: Fix possible crash on mgmt_index_removed. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <19b40ca62607cef78369549d1af091f2fd558931 || >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <4883296505aa7e4863c6869b689afb6005633b23 || >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <0cc47233af35fb5f10b5e6a027cb4ccd480caf9a || >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <8c3f7943a29145d8a2d8e24893762f7673323eae || >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <f53e1c9c726d83092167f2226f32bd3b73f26c21 | 19b40ca62607cef78369549d1af091f2fd558931, 4883296505aa7e4863c6869b689afb6005633b23, 0cc47233af35fb5f10b5e6a027cb4ccd480caf9a, 8c3f7943a29145d8a2d8e24893762f7673323eae, f53e1c9c726d83092167f2226f32bd3b73f26c21 |
| Linux/Linuxgeneric | 6.0 | Not reported |
Published upstream
Oct 21, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed If mgmt_index_removed is called while there are commands queued on cmd_sync it could lead to crashes like the bellow trace: 0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc 0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth] 0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth] 0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth] So while handling mgmt_index_removed this attempts to dequeue commands passed as user_data to cmd_sync.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2024-49951 records a Unknown severity vulnerability in Bluetooth: MGMT: Fix possible crash on mgmt_index_removed. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <19b40ca62607cef78369549d1af091f2fd558931 || >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <4883296505aa7e4863c6869b689afb6005633b23 || >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <0cc47233af35fb5f10b5e6a027cb4ccd480caf9a || >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <8c3f7943a29145d8a2d8e24893762f7673323eae || >=7cf5c2978f23fdbb2dd7b4e8b07e362ae2d8211c <f53e1c9c726d83092167f2226f32bd3b73f26c21 | 19b40ca62607cef78369549d1af091f2fd558931, 4883296505aa7e4863c6869b689afb6005633b23, 0cc47233af35fb5f10b5e6a027cb4ccd480caf9a, 8c3f7943a29145d8a2d8e24893762f7673323eae, f53e1c9c726d83092167f2226f32bd3b73f26c21 |
| Linux/Linuxgeneric | 6.0 | Not reported |
Published upstream
Oct 21, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed If mgmt_index_removed is called while there are commands queued on cmd_sync it could lead to crashes like the bellow trace: 0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc 0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth] 0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth] 0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth] So while handling mgmt_index_removed this attempts to dequeue commands passed as user_data to cmd_sync.
Quoted source text, attributed separately from HOL analysis.