CVE-2025-39860

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability exists in the Bluetooth stack, specifically within the l2cap sock cleanup listen() function. The issue arises from a race condition where a socket can be freed and subsequently accessed by another thread, leading to a potential system crash. The vulnerability was identified through syzbot testing and involves the bt accept dequeue() function and the l2cap sock release() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.