In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
Move the creation of debugfs files into a dedicated function, and ensure they are explicitly removed during vhci_release(), before associated data structures are freed.
Previously, debugfs files such as "force_suspend", "force_wakeup", and others were created under hdev->debugfs but not removed in vhci_release(). Since vhci_release() frees the backing vhci_data structure, any access to these files after release would result in use-after-free errors.
Although hdev->debugfs is later freed in hci_release_dev(), user can access files after vhci_data is freed but before hdev->debugfs is released.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 19, 2025 |
| Suse | — | Upgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-sourceUpgrade dtb-alteraUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-mediatek | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-realtimeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04 | Mar 17, 2026 | Sep 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub