Riskcovery

CVE-2025-40141

Bluetooth: ISO: Fix possible UAF on iso_conn_free

State
Published
Severity
8.0 High
Published
Nov 12, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix possible UAF on iso_conn_free

This attempt to fix similar issue to sco_conn_free where if the conn->sk is not set to NULL may lead to UAF on iso_conn_free.

Scores

CVSSScoreVectorSource
3.18.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ccf74f2390d60a2f9a75ef496d2564abb478f46a to before eba6d787ec117a5d2c60f9644e0a39c18542b6beAffected
  • ccf74f2390d60a2f9a75ef496d2564abb478f46a to before 5319145a07d8bf5b0782b25cb3115825689d42bbAffected
  • ccf74f2390d60a2f9a75ef496d2564abb478f46a to before 80689777919f02328eb873769de4647c9dd3e371Affected
  • ccf74f2390d60a2f9a75ef496d2564abb478f46a to before c92ad1a155ccfa38b87bd1d998287e1c0a24248dAffected
  • ccf74f2390d60a2f9a75ef496d2564abb478f46a to before 9950f095d6c875dbe0c9ebfcf972ec88fdf26fc8Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.156 through 6.1.*Not affected
  • 6.6.112 through 6.6.*Not affected
  • 6.12.53 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.