CVE-2025-71082

A use-after-free flaw was found in the Linux kernel's Bluetooth USB driver. The btusb driver binds to multiple USB interfaces (INTF, ISOC, DIAG) but allocates its data structure with devm_kzalloc() tied to a single interface. When that interface is released, the memory is freed while other interfaces still reference it, causing use-after-free.

This affects systems with USB Bluetooth adapters. The issue occurs during Bluetooth disconnect operations when multiple interfaces are involved. The fix reverts to explicit memory management to properly handle multi-interface lifetimes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.