Bluetooth Protocol Vulnerability in Linux Kernel
CVE-2025-40308

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 8 December 2025

What is CVE-2025-40308?

A vulnerability exists in the Bluetooth stack of the Linux Kernel, specifically concerning the bcsp_recv() function, which can be invoked without proper protocol registration. This oversight leads to a potential NULL pointer dereference, posing risks to system stability and security. To mitigate this, it is crucial that the HCI_UART_REGISTERED flag is verified before processing any incoming data. If the Bluetooth Control and Status Protocol (BCSP) is not registered, the function should return an error code to prevent execution errors.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch