In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix race condition in hidp_session_thread
There is a potential race condition in hidp_session_thread that may lead to use-after-free. For instance, the timer is active while hidp_del_timer is called in hidp_session_thread(). After hidp_session_put, then 'session' will be freed, causing kernel panic when hidp_idle_timeout is running.
The solution is to use del_timer_sync instead of del_timer.
Here is the call trace:
? hidp_session_probe+0x780/0x780 call_timer_fn+0x2d/0x1e0 __run_timers.part.0+0x569/0x940 hidp_session_probe+0x780/0x780 call_timer_fn+0x1e0/0x1e0 ktime_get+0x5c/0xf0 lapic_next_deadline+0x2c/0x40 clockevents_program_event+0x205/0x320 run_timer_softirq+0xa9/0x1b0 __do_softirq+0x1b9/0x641 __irq_exit_rcu+0xdc/0x190 irq_exit_rcu+0xe/0x20 sysvec_apic_timer_interrupt+0xa1/0xc0
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade perfUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-devel | Oct 11, 2026 | Sep 22, 2026 |
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Dec 24, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 17, 2026 | Dec 24, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-devel | Sep 28, 2026 | Sep 24, 2026 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linux-azure-fdeUpgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-gkeUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-aws-5.15Upgrade linux-nvidiaUpgrade linux-aws-fipsUpgrade linux-nvidia-tegraUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-riscv-5.15Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-realtimeUpgrade linux-intel-iot-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-iotUpgrade linux-gcp-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-ibm-5.4Upgrade linux-gcpUpgrade linux | Jan 6, 2026 | Dec 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 24, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub