CVE-2025-39861

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the Bluetooth subsystem’s virtual HCI (vhci) component. A use-after-free condition can occur due to debugfs files (such as force suspend and force wakeup) not being properly removed during the vhci release() process before associated data structures are freed. This can lead to errors if these files are accessed after the backing data structure has been freed but before the debugfs directory itself is released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.