CVE-2025-40141: Bluetooth: ISO: Fix possible UAF on iso_conn_free
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Fix possible UAF on isoconnfree
This attempt to fix similar issue to scoconnfree where if the conn->sk is not set to NULL may lead to UAF on isoconnfree.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Fix possible UAF on isoconnfree
This attempt to fix similar issue to scoconnfree where if the conn-sk is not set to NULL may lead to UAF on isoconnfree.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40141?
The severity of CVE-2025-40141 is classified as medium due to potential use-after-free (UAF) vulnerabilities.
How do I fix CVE-2025-40141?
To fix CVE-2025-40141, update your Linux kernel to the latest stable version where the vulnerability has been patched.
What systems are affected by CVE-2025-40141?
CVE-2025-40141 affects certain versions of the Linux Kernel that implement Bluetooth features.
What are the potential impacts of CVE-2025-40141?
Exploitation of CVE-2025-40141 could lead to unexpected behavior including crashes or potential arbitrary code execution.
Has CVE-2025-40141 been patched?
Yes, CVE-2025-40141 has been addressed in recent kernel updates, and users should ensure they are running the patched version.