PT-2025-49441 · Linux+3 · Linux Kernel+3
Published
2025-09-27
·
Updated
2026-05-26
·
CVE-2025-40309
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.17.0-rc5-g717368f83676 #4
Description
The Linux kernel contains a use-after-free issue within the Bluetooth Subclass Offset (SCO) component. This flaw is related to improper handling of memory freeing during SCO connection management, specifically within the
sco conn free function. The issue manifests as a slab-use-after-free condition, potentially leading to system instability or other undefined behavior. The vulnerability is triggered during the handling of Bluetooth connections and can occur when a connection is unexpectedly released while still in use.Recommendations
Update to a version newer than 6.17.0-rc5-g717368f83676 #4.
Exploit
Fix
Buffer Overflow
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu