A high-severity vulnerability in the Zephyr RTOS Bluetooth stack allows unauthenticated attackers to cause system instability or memory corruption.

This vulnerability, classified as CWE-190, involves improper handling of Bluetooth Low Energy fixed channels where an attacker can trigger an invalid disconnection request. The flaw is exploitable by an unauthenticated attacker within physical proximity to the target device.

The exploitation of this flaw can lead to denial of service through assertion failures or system crashes, which significantly impacts the availability of embedded devices. Given the CVSS score of 7.1, the risk is elevated for industrial or critical infrastructure deployments where system uptime is paramount. Potential memory corruption may also be leveraged to compromise device integrity or bypass security controls in specific implementations.

Immediate Action: Review the official security advisory at the provided GitHub repository and apply the necessary patches or configuration changes as soon as they are made available by the vendor.

Proactive Monitoring: Monitor Bluetooth traffic logs and system performance metrics for unexpected device reboots or abnormal memory usage patterns in BLE-enabled components.

Compensating Controls: If patching is not immediately feasible, restrict the physical exposure of BLE-enabled devices and disable Bluetooth functionality where it is not strictly required for operation.

Public Exploit Available: No (exploit_available: false)

Given the potential for denial of service and memory corruption, organizations utilizing Zephyr RTOS should prioritize tracking the vendor security advisory for the release of a corrective patch. Immediate action is required to assess exposure and implement hardening measures to mitigate the risk of unauthorized BLE channel manipulation.