In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix race condition in hidp_session_thread
There is a potential race condition in hidp_session_thread that may lead to use-after-free. For instance, the timer is active while hidp_del_timer is called in hidp_session_thread(). After hidp_session_put, then 'session' will be freed, causing kernel panic when hidp_idle_timeout is running.
The solution is to use del_timer_sync instead of del_timer.
Here is the call trace:
? hidp_session_probe+0x780/0x780 call_timer_fn+0x2d/0x1e0 __run_timers.part.0+0x569/0x940 hidp_session_probe+0x780/0x780 call_timer_fn+0x1e0/0x1e0 ktime_get+0x5c/0xf0 lapic_next_deadline+0x2c/0x40 clockevents_program_event+0x205/0x320 run_timer_softirq+0xa9/0x1b0 __do_softirq+0x1b9/0x641 __irq_exit_rcu+0xdc/0x190 irq_exit_rcu+0xe/0x20 sysvec_apic_timer_interrupt+0xa1/0xc0
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 24, 2025 |
| Ubuntu | — | Upgrade linux-lowlatencyUpgrade linux-azure-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-gkeUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-azure-fde-5.15Upgrade linux-gkeopUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegraUpgrade linux-oracle-5.4Upgrade linux-aws-5.15Upgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-oracle-5.15Upgrade linux-ibm-5.15Upgrade linux-intel-iotgUpgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-azureUpgrade linux-iotUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcpUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-hwe-5.15Upgrade linux-lowlatency-hwe-5.15 | Jan 6, 2026 | Dec 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub