PT-2025-27686 · Linux+5 · Linux Kernel+5

Published 2025-03-01 · Updated 2026-04-20 · CVE-2025-38099

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel's Bluetooth functionality has been identified. The issue arises when a SCO connection is established without the proper voice setting, which can cause the controller to lock up. The problem is resolved by disabling SCO support if the READ VOICE SETTING is unsupported or broken.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2025-09020

CVE-2025-38099

ECHO-6588-5DB3-9551

OESA-2025-1823

OESA-2025-1824

OESA-2025-1870

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 3258

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38099.json · Exploit
• https://ubuntu.com/security/CVE-2025-38145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40238 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38714 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40169 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40105 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40070 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38474 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2025-38099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40281 · Vendor Advisory