Use After Free Vulnerability in Bluetooth Stack of Linux Kernel

CVE-2025-40309

What is CVE-2025-40309?

A vulnerability exists in the Bluetooth stack of the Linux Kernel, specifically in the handling of SCO connections. This issue is characterized by a use-after-free error in the function sco_conn_free, which could result in memory corruption when an SCO connection is terminated. As the system attempts to free memory that is already in use, this vulnerability may lead to unexpected behavior, potentially allowing an attacker to execute arbitrary code or crash the system. System administrators and security professionals are advised to apply the latest patches to mitigate any risks associated with this vulnerability.

References