An unauthenticated boundary validation flaw in the Linux kernel Bluetooth subsystem allows adjacent attackers to cause potential denial of service or information disclosure.

This is an improper input validation vulnerability within the Bluetooth hci_event module, triggered via unauthenticated adjacent network access when processing malformed HCI event frames before length checks occur.

A successful exploit against this vulnerability could result in system instability, kernel crashes, or unauthorized memory access, leading to operational downtime. The CVSS score of 8.1 reflects high severity due to the potential for complete system availability impact and high confidentiality risks within the affected kernel space.

Immediate Action: Update the Linux kernel to version 6.19.12 or later, or apply the official vendor patches provided by the kernel stable repository.

Proactive Monitoring: Monitor system logs for kernel panics, Bluetooth driver errors, or unexpected Bluetooth service restarts that may indicate exploitation attempts.

Compensating Controls: Restrict physical and adjacent Bluetooth access where possible, and disable unused Bluetooth adapters on enterprise systems until patches are applied.

Public Exploit Available: false

System administrators must prioritize updating affected Linux kernel deployments to the patched versions immediately to eliminate the underlying memory boundary risk. Review local infrastructure for active Bluetooth interfaces and apply vendor-supplied updates as part of standard patch management cycles.