PT-2025-33791 · Linux+6 · Linux Kernel+6
Published
2025-07-23
·
Updated
2026-04-20
·
CVE-2025-38593
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.12.19-kernel
Description:
A double-free vulnerability exists in the Bluetooth stack within the Linux kernel, specifically within the
hci discovery filter clear() function. This function frees a memory region (uuids array) and subsequently sets it to NULL. A race condition can occur where the memory is freed again before being set to NULL, leading to a double-free error. This can occur during service discovery initiated by start service discovery(). The vulnerability is triggered by concurrent calls to hci discovery filter clear() from different contexts, potentially leading to kernel crashes as demonstrated by the provided backtrace.Recommendations:
Update to Linux kernel version 6.12.19-kernel or later to address this issue.
Exploit
Fix
DoS
Double Free
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu