In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix hci_suspend_sync crash
If hci_unregister_dev() frees the hci_dev object but hci_suspend_notifier may still be accessing it, it can cause the program to crash. Here's the call trace: <4>[102152.653246] Call Trace: <4>[102152.653254] hci_suspend_sync+0x109/0x301 [bluetooth] <4>[102152.653259] hci_suspend_dev+0x78/0xcd [bluetooth] <4>[102152.653263] hci_suspend_notifier+0x42/0x7a [bluetooth] <4>[102152.653268] notifier_call_chain+0x43/0x6b <4>[102152.653271] __blocking_notifier_call_chain+0x48/0x69 <4>[102152.653273] __pm_notifier_call_chain+0x22/0x39 <4>[102152.653276] pm_suspend+0x287/0x57c <4>[102152.653278] state_store+0xae/0xe5 <4>[102152.653281] kernfs_fop_write+0x109/0x173 <4>[102152.653284] __vfs_write+0x16f/0x1a2 <4>[102152.653287] ? selinux_file_permission+0xca/0x16f <4>[102152.653289] ? security_file_permission+0x36/0x109 <4>[102152.653291] vfs_write+0x114/0x21d <4>[102152.653293] __x64_sys_write+0x7b/0xdb <4>[102152.653296] do_syscall_64+0x59/0x194 <4>[102152.653299] entry_SYSCALL_64_after_hwframe+0x5c/0xc1
This patch holds the reference count of the hci_dev object while processing it in hci_suspend_notifier to avoid potential crash caused by the race condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-awsUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-176-fipsUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-generic-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-5.15.0-1105-awsUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-gcp-lts-22.04 | Apr 10, 2026 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub