Use After Free Vulnerability in Linux Kernel Bluetooth Module
CVE-2025-39981
What is CVE-2025-39981?
A vulnerability in the Linux kernel Bluetooth module can lead to a Use After Free condition. This occurs when the 'mgmt_pending' structure is freed while still being processed. Specifically, it puts the system at risk by potentially allowing access to freed memory areas, which may be exploited to cause unexpected behavior or crashes. Implementation of checks to confirm that 'mgmt_pending' is still valid ensures better protection against such conditions, addressing potential threats that could arise during the execution of Bluetooth management commands.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux cf75ad8b41d2aa06f98f365d42a3ae8b059daddd
Linux cf75ad8b41d2aa06f98f365d42a3ae8b059daddd < 87a1f16f07c6c43771754075e08f45b41d237421
Linux cf75ad8b41d2aa06f98f365d42a3ae8b059daddd < 302a1f674c00dd5581ab8e493ef44767c5101aab