PT-2026-2603 · Linux+2 · Linux Kernel+2
Published
2026-01-13
·
Updated
2026-06-16
·
CVE-2025-71082
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Bluetooth component of the Linux kernel related to memory management within the btusb driver. The issue stems from the use of
devm kzalloc() for allocating Bluetooth data, which incorrectly ties the lifetime of the data to a single interface instead of managing it across all interfaces (INTF, ISOC, and DIAG). This can lead to memory being freed prematurely in btusb disconnect() while still in use by other interfaces, potentially causing system instability or crashes. The fix involves reverting to explicit memory freeing instead of relying on devm kzalloc().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu