CVE-2025-40308

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the Bluetooth BCSP (Bluetooth Core Specification Protocol) component. Specifically, the bcsp recv() function can be invoked even when the BCSP protocol is not registered, leading to a NULL pointer dereference. This issue is demonstrated by a stack trace involving bcsp recv() within the hci uart tty receive() function. The root cause is the absence of a check to ensure the HCI UART REGISTERED flag is set before processing received data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.