CVE-2025-38592

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.0-syzkaller-10892-g4e82c87058f4

Description: A flaw exists in the Bluetooth stack within the Linux kernel related to the handling of device coredumps. Specifically, the hci devcd dump function can experience an out-of-bounds write due to the order in which dev coredumpv and skb put data are called. When dev coredumpv frees the buffer before skb put data completes, it leads to a vmalloc-out-of-bounds error. A crash report from syzbot demonstrates this issue.

Recommendations: versions prior to 6.14.0-syzkaller-10892-g4e82c87058f4