Vulnerability in Linux Kernel Bluetooth Functionality

CVE-2025-40141

What is CVE-2025-40141?

A vulnerability has been identified within the Linux Kernel's Bluetooth subsystem that may lead to a Use After Free scenario on the iso_conn_free function. This issue arises when the socket connection (conn->sk) is not properly nullified after its usage ends, potentially allowing attackers to exploit this flaw to access freed memory. The flaw has been addressed in a recent patch, enhancing the stability and security of the Bluetooth ISOs. It is crucial for users and administrators to ensure they are running the latest version of the kernel to mitigate this vulnerability.

References