In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix race condition in hidp_session_thread
There is a potential race condition in hidp_session_thread that may lead to use-after-free. For instance, the timer is active while hidp_del_timer is called in hidp_session_thread(). After hidp_session_put, then 'session' will be freed, causing kernel panic when hidp_idle_timeout is running.
The solution is to use del_timer_sync instead of del_timer.
Here is the call trace:
? hidp_session_probe+0x780/0x780 call_timer_fn+0x2d/0x1e0 __run_timers.part.0+0x569/0x940 hidp_session_probe+0x780/0x780 call_timer_fn+0x1e0/0x1e0 ktime_get+0x5c/0xf0 lapic_next_deadline+0x2c/0x40 clockevents_program_event+0x205/0x320 run_timer_softirq+0xa9/0x1b0 __do_softirq+0x1b9/0x641 __irq_exit_rcu+0xdc/0x190 irq_exit_rcu+0xe/0x20 sysvec_apic_timer_interrupt+0xa1/0xc0
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 24, 2025 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-realtimeUpgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-iotUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-azureUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-nvidia-tegraUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-gkeUpgrade linux-gcp-5.15Upgrade linux-raspiUpgrade linux-xilinx-zynqmpUpgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-aws-5.15Upgrade linux-azure-fipsUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-ibm-5.15Upgrade linux-azure-fde-5.15Upgrade linux-intel-iotg | Jan 6, 2026 | Dec 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub