{"id":"CVE-2024-38620","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HCI: Remove HCI_AMP support\n\nSince BT_HS has been remove HCI_AMP controllers no longer has any use so\nremove it along with the capability of creating AMP con…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HCI: Remove HCI_AMP support\n\nSince BT_HS has been remove HCI_AMP controllers no longer has any use so\nremove it along with the capability of creating AMP con…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.3, < 6.6.33","linux_kernel >= 6.7, < 6.8.12","linux_kernel >= 6.9, < 6.9.3"],"patched":["linux_kernel 6.9.3"],"published":"2024-06-20","updated":"2026-08-23","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-38620","references":[{"url":"https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9e6cf0eccfe15b67bf9773ecd101162dfdfed5e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00306,"epssPercentile":0.2076,"ingestedAt":"2026-08-23T13:48:04.341Z","slug":"CVE-2024-38620","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HCI: Remove HCI_AMP support\n\nSince BT_HS has been remove HCI_AMP controllers no longer has any use so\nremove it along with the capability of creating AMP controllers.\n\nSince we no longer need to differentiate between AMP and Primary\ncontrollers, as only HCI_PRIMARY is left, this also remove\nhdev->dev_type altogether.\n\n## Affected\n\n- `linux_kernel >= 4.3, < 6.6.33`\n- `linux_kernel >= 6.7, < 6.8.12`\n- `linux_kernel >= 6.9, < 6.9.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.9.3`","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}