CVE-2025-39982

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc7

Description The Linux kernel contains a use-after-free issue within the Bluetooth stack, specifically in the hci acl create conn sync function. This flaw occurs when a connection is pending command submission and is freed prematurely. The issue is related to handling Bluetooth connections and can lead to system instability or potential code execution. The vulnerability is triggered during the handling of HCI ACL (Asynchronous Connection-Less) packets. The root cause is a race condition where a connection object is freed while still being used. The vulnerability is present in the handling of HCI events and can be triggered through the hci connect acl function.

Recommendations Update the Linux kernel to version 6.16.0-rc7 or later.