CVE-2025-40318

A use-after-free flaw was found in hci_cmd_sync_dequeue_once in net/bluetooth/hci_sync.c in Bluetooth: hci_sync in Linux Kernel. This vulnerability could even lead to a kernel information leak problem.

This vulnerability is evaluated as having a Moderate impact for Red Hat Enterprise Linux because successful exploitation requires local user access and winning a tight race condition to trigger a use-after-free in the kernel Bluetooth synchronization handling. In typical Red Hat Enterprise Linux server environments, Bluetooth hardware is not present or the subsystem is inactive, substantially restricting exposure. While memory corruption could theoretically result in a system crash or privilege escalation, the high execution complexity and local prerequisites limit the overall risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.