In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
bt_sock_alloc() attaches allocated sk object to the provided sock object. If rfcomm_dlc_alloc() fails, we release the sk object, but leave the dangling pointer in the sock object, which may cause use-after-free.
Fix this by swapping calls to bt_sock_alloc() and rfcomm_dlc_alloc().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-awsUpgrade linux-image-kvm | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub