{"cve":"CVE-2024-26959","nvd":{"published":"2024-05-01T06:15:12.207","modified":"2026-06-17T07:18:47.703","status":"Analyzed","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btnxpuart: Fix btnxpuart_close\n\nFix scheduling while atomic BUG in btnxpuart_close(), properly\npurge the transmit queue and free the receive skb.\n\n[   10.973809] BUG: scheduling while atomic: kworker/u9:0/80/0x00000002\n...\n[   10.980740] CPU: 3 PID: 80 Comm: kworker/u9:0 Not tainted 6.8.0-rc7-0.0.0-devel-00005-g61fdfceacf09 #1\n[   10.980751] Hardware name: Toradex Verdin AM62 WB on Dahlia Board (DT)\n[   10.980760] Workqueue: hci0 hci_power_off [bluetooth]\n[   10.981169] Call trace:\n...\n[   10.981363]  uart_update_mctrl+0x58/0x78\n[   10.981373]  uart_dtr_rts+0x104/0x114\n[   10.981381]  tty_port_shutdown+0xd4/0xdc\n[   10.981396]  tty_port_close+0x40/0xbc\n[   10.981407]  uart_close+0x34/0x9c\n[   10.981414]  ttyport_close+0x50/0x94\n[   10.981430]  serdev_device_close+0x40/0x50\n[   10.981442]  btnxpuart_close+0x24/0x98 [btnxpuart]\n[   10.981469]  hci_dev_close_sync+0x2d8/0x718 [bluetooth]\n[   10.981728]  hci_dev_do_close+0x2c/0x70 [bluetooth]\n[   10.981862]  hci_power_off+0x20/0x64 [bluetooth]","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":5.5},"cwes":[],"references":["https://git.kernel.org/stable/c/586e099c93fe26b7bd40593979532f507ed9f6a4","https://git.kernel.org/stable/c/664130c0b0309b360bc5bdd40a30604a9387bde8","https://git.kernel.org/stable/c/74bcf708775c405f7fb6ed776ccd3e1957f38a52","https://git.kernel.org/stable/c/d4e2365b07f1ae1f811a915b514caef5b2d6581e","https://git.kernel.org/stable/c/586e099c93fe26b7bd40593979532f507ed9f6a4"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-19T21:49:08.435428910+00:00"},"epss":{"cve":"CVE-2024-26959","score":0.00222,"percentile":0.12824,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}