CVE-2025-38593

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition in the hci_discovery_filter_clear() function can lead to a double free vulnerability, which is a type of memory corruption. A local attacker could exploit this flaw to trigger a kernel bug, causing the system to crash and resulting in a Denial of Service (DoS).

This is a MODERATE impact flaw in the Linux kernel's Bluetooth Host Controller Interface (HCI) component. A race condition within the hci_discovery_filter_clear() function can lead to a double-free vulnerability, potentially causing a kernel crash due to a null pointer problem.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the bluetooth kernel module from loading. This can be achieved by creating a modprobe configuration file.

1. Create or edit /etc/modprobe.d/disable-bluetooth.conf:

   install bluetooth /bin/true
   

2. Unload the module if it is currently loaded:

   sudo modprobe -r bluetooth
   

3. Reboot the system for the changes to take full effect.

Note that disabling the bluetooth module will prevent all Bluetooth functionality on the system.