Race Condition in Bluetooth Socket Writes in Linux Kernel

CVE-2025-68305

What is CVE-2025-68305?

A race condition vulnerability has been identified in the Bluetooth implementation of the Linux kernel, specifically affecting the interaction between socket binds and write iterations. This issue can result in a use-after-free scenario if a socket is freed while a write operation is still in progress. By employing the hci_dev_lock to synchronize the socket operations, the vulnerability is mitigated, ensuring the integrity of Bluetooth command processing and enhancing system security. Regular updates are recommended to keep systems protected against such vulnerabilities.

References