Bluetooth Protocol Vulnerability in Linux Kernel

CVE-2025-40308

What is CVE-2025-40308?

A vulnerability exists in the Bluetooth stack of the Linux Kernel, specifically concerning the bcsp_recv() function, which can be invoked without proper protocol registration. This oversight leads to a potential NULL pointer dereference, posing risks to system stability and security. To mitigate this, it is crucial that the HCI_UART_REGISTERED flag is verified before processing any incoming data. If the Bluetooth Control and Status Protocol (BCSP) is not registered, the function should return an error code to prevent execution errors.

References