---
id: CVE-2024-38620
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  Bluetooth: HCI: Remove HCI_AMP support

  Since BT_HS has been remove HCI_AMP controllers no longer has any use so
  remove it along with the capability of creating AMP con…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  Bluetooth: HCI: Remove HCI_AMP support

  Since BT_HS has been remove HCI_AMP controllers no longer has any use so
  remove it along with the capability of creating AMP con…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 4.3, < 6.6.33'
  - 'linux_kernel >= 6.7, < 6.8.12'
  - 'linux_kernel >= 6.9, < 6.9.3'
patched:
  - linux_kernel 6.9.3
published: '2024-06-20'
updated: '2026-08-23'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-38620'
references:
  - url: 'https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9e6cf0eccfe15b67bf9773ecd101162dfdfed5e2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00306
epssPercentile: 0.20851
ingestedAt: '2026-08-23T13:48:04.341Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: HCI: Remove HCI_AMP support

Since BT_HS has been remove HCI_AMP controllers no longer has any use so
remove it along with the capability of creating AMP controllers.

Since we no longer need to differentiate between AMP and Primary
controllers, as only HCI_PRIMARY is left, this also remove
hdev->dev_type altogether.

## Affected

- `linux_kernel >= 4.3, < 6.6.33`
- `linux_kernel >= 6.7, < 6.8.12`
- `linux_kernel >= 6.9, < 6.9.3`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.9.3`