PT-2025-33791 · Linux+6 · Linux Kernel+6
Publicado
2025-07-23
·
Atualizado
2026-04-20
·
CVE-2025-38593
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.12.19-kernel
Description:
A double-free vulnerability exists in the Bluetooth stack within the Linux kernel, specifically within the
hci discovery filter clear() function. This function frees a memory region (uuids array) and subsequently sets it to NULL. A race condition can occur where the memory is freed again before being set to NULL, leading to a double-free error. This can occur during service discovery initiated by start service discovery(). The vulnerability is triggered by concurrent calls to hci discovery filter clear() from different contexts, potentially leading to kernel crashes as demonstrated by the provided backtrace.Recommendations:
Update to Linux kernel version 6.12.19-kernel or later to address this issue.
Exploit
Correção
DoS
Double Free
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu