A stack buffer overflow vulnerability in the Linux kernel Bluetooth subsystem allows a local authenticated attacker to achieve high impact across confidentiality, integrity, and availability.

This is a stack buffer overflow flaw within the hci_le_big_create_sync function of the Bluetooth subsystem, triggered via an undersized buffer allocation for BIS entries, requiring local low privileges and no user interaction.

A successful exploit of this vulnerability could lead to complete system compromise, including unauthorized execution of arbitrary code, data corruption, and system crashes leading to downtime. The CVSS score of 7.8 reflects a high severity threat, primarily constrained by the requirement for local access, but representing critical risk to system integrity and stability once local execution is achieved.

Immediate Action: Update the Linux kernel to version 6.12.81, 6.18.22, 6.19.12, or later where the buffer size mismatch is resolved.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or KASAN reports related to Bluetooth HCI worker tasks.

Compensating Controls: Restrict local user access and limit the execution of untrusted code on vulnerable hosts where immediate kernel patching is not feasible.

Public Exploit Available: No - unknown

System administrators must treat this high severity flaw with urgency by scheduling and applying the relevant Linux kernel updates. Given the potential for complete system compromise and kernel instability, prioritizing the deployment of patched kernel builds is essential to secure affected hosts.