Bluetooth Vulnerability in Linux Kernel Affects Mesh Networking Functionality

CVE-2025-40284

What is CVE-2025-40284?

A vulnerability in the Bluetooth Management (MGMT) subsystem of the Linux Kernel leads to a potential system crash due to a failure to cancel the mesh_send_done timer when the hardware device (hdev) is removed. This oversight can result in a slab-use-after-free error, which is seen to sporadically trigger during automated testing, particularly during mesh networking operations. To mitigate this risk, the timer should be properly canceled in the handler for hardware device removal, thus enhancing the overall stability and reliability of Bluetooth operations in Linux-based systems.

References