CVE-2025-40284

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's Bluetooth implementation related to mesh sending. Specifically, the mesh send done timer is not properly canceled when a hardware device (hdev) is removed. This can lead to a crash if the timer triggers after the hdev has been released, as observed in BlueZ testing ("Mesh - Send cancel - 1" test). The issue involves a slab-use-after-free condition within the timer softirq handler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.