Bluetooth Connectivity Issues in Linux Kernel

CVE-2025-40282

What is CVE-2025-40282?

A vulnerability exists in the Linux kernel's Bluetooth implementation that affects the 6lowpan module. The issue arises due to the absence of proper handling for link-local headers on the IPv6 receive path, which can lead to system crashes when processing incoming packets. Specifically, the skb_reset_mac_header() function was not called for uncompressed IPv6 packets, resulting in a potential denial of service scenario. The fix adds the necessary function call to ensure that packet headers are correctly set, promoting stability in the networking stack.

References