In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix hci_suspend_sync crash
If hci_unregister_dev() frees the hci_dev object but hci_suspend_notifier may still be accessing it, it can cause the program to crash. Here's the call trace: <4>[102152.653246] Call Trace: <4>[102152.653254] hci_suspend_sync+0x109/0x301 [bluetooth] <4>[102152.653259] hci_suspend_dev+0x78/0xcd [bluetooth] <4>[102152.653263] hci_suspend_notifier+0x42/0x7a [bluetooth] <4>[102152.653268] notifier_call_chain+0x43/0x6b <4>[102152.653271] __blocking_notifier_call_chain+0x48/0x69 <4>[102152.653273] __pm_notifier_call_chain+0x22/0x39 <4>[102152.653276] pm_suspend+0x287/0x57c <4>[102152.653278] state_store+0xae/0xe5 <4>[102152.653281] kernfs_fop_write+0x109/0x173 <4>[102152.653284] __vfs_write+0x16f/0x1a2 <4>[102152.653287] ? selinux_file_permission+0xca/0x16f <4>[102152.653289] ? security_file_permission+0x36/0x109 <4>[102152.653291] vfs_write+0x114/0x21d <4>[102152.653293] __x64_sys_write+0x7b/0xdb <4>[102152.653296] do_syscall_64+0x59/0x194 <4>[102152.653299] entry_SYSCALL_64_after_hwframe+0x5c/0xc1
This patch holds the reference count of the hci_dev object while processing it in hci_suspend_notifier to avoid potential crash caused by the race condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-176-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-176-genericUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-5.15Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1105-awsUpgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-5.15 | Apr 10, 2026 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub