In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set
hci_cmd_sync_queue shall return an error if HCI_UNREGISTER flag has been set as that means hci_unregister_dev has been called so it will likely cause a uaf after the timeout as the hdev will be freed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade python3-perf | Jul 14, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 11, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub