In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set
hci_cmd_sync_queue shall return an error if HCI_UNREGISTER flag has been set as that means hci_unregister_dev has been called so it will likely cause a uaf after the timeout as the hdev will be freed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extra | Jul 14, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 11, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub