PT-2025-18393 · Linux · Linux Kernel

Published 2025-05-01 · Updated 2025-05-05 · CVE-2025-23139

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel's Bluetooth component, specifically in the hci uart module, has been resolved. The issue involves a race condition during initialization where the 'HCI UART PROTO READY' bit is set before the 'hci uart register dev()' function is called, leading to access to uninitialized fields. This can occur when 'hci tty uart close()' is called after the bit is set but before the device is registered. The problem is fixed by setting the 'HCI UART PROTO READY' bit after the device is registered and adding an additional bit to allow power-up without the original bit set.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-23139

Affected Products

Linux Kernel

References · 20

• https://security-tracker.debian.org/tracker/CVE-2025-23139 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-23139 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-23139 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23139 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-23139 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-23139 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23139 · Security Note
• https://git.kernel.org/stable/c/02e1bcdfdf769974e7e9fa285e295cd9852e2a38 · Note
• https://git.kernel.org/stable/c/a40f94f7caa8d3421b64f63ac31bc0f24c890f39 · Note
• https://git.kernel.org/stable/c/1dcf08fcff5ca529de6dc0395091f28854f4e54a · Note
• https://git.kernel.org/linus/5df5dafc171b90d0b8d51547a82657cd5a1986c7 · Note
• https://twitter.com/CVEnew/status/1918568506809040958 · Twitter Post
• https://git.kernel.org/stable/c/281782d2c6730241e300d630bb9f200d831ede71 · Note
• https://git.kernel.org/stable/c/80f14e9de6a43a0bd8194cad1003a3e6dcbc3984 · Note
• https://git.kernel.org/stable/c/5df5dafc171b90d0b8d51547a82657cd5a1986c7 · Note