CVE-2025-40309

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc5-g717368f83676 #4

Description The Linux kernel contains a use-after-free issue within the Bluetooth Subclass Offset (SCO) component. This flaw is related to improper handling of memory freeing during SCO connection management, specifically within the sco conn free function. The issue manifests as a slab-use-after-free condition, potentially leading to system instability or other undefined behavior. The vulnerability is triggered during the handling of Bluetooth connections and can occur when a connection is unexpectedly released while still in use.

Recommendations Update to a version newer than 6.17.0-rc5-g717368f83676 #4.