CVE-2025-39983

A flaw was discovered in the Bluetooth subsystem of the Linux kernel. When processing a HCI_EV_NUM_COMP_PKTS event, the function hci_conn_tx_dequeue() did not properly hold or release the hdev device lock, which may lead to a use-after-free of the connection structure.

This vulnerability is rated as having a Moderate severity for Red Hat Enterprise Linux because exploitation requires a system equipped with active Bluetooth hardware and depends on specific race conditions during packet completion processing that typically result in a kernel denial of service. Typical enterprise server deployments rarely enable or include Bluetooth adapters, significantly constraining the real-world attack surface. Environments without Bluetooth controllers or where the Bluetooth stack remains inactive are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.