Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.299

Description A use-after-free issue was discovered in the L2CAP (Logical Link Control and Adaptation Protocol) component of the Bluetooth protocol. This issue is related to the l2cap reassemble sdu function. The actual impact and attack plausibility have not yet been proven.

Recommendations For Linux Kernel versions prior to v4.14.299, update to version v4.14.299 or later to resolve the issue. As a temporary workaround, consider disabling Bluetooth functionality until a patch is available. Restrict access to the L2CAP protocol to minimize the risk of exploitation.