In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set
hci_cmd_sync_queue shall return an error if HCI_UNREGISTER flag has been set as that means hci_unregister_dev has been called so it will likely cause a uaf after the timeout as the hdev will be freed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extra | Jul 14, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 11, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub