A use-after-free vulnerability in the Linux kernel Bluetooth subsystem could allow an unauthenticated attacker to cause system instability or potential code execution.

This is a memory management flaw where the kernel dereferences a pointer (conn->conn_timeout) after releasing necessary locks, leading to a use-after-free condition. The vulnerability is exploitable by an unauthenticated attacker via the adjacent network.

Successful exploitation of this use-after-free vulnerability can lead to system crashes (Denial of Service) or potential arbitrary code execution within the kernel context. Given the CVSS score of 8.8 (High), this represents a significant risk to system availability and integrity, particularly for devices utilizing Bluetooth connectivity.

Immediate Action: Update the Linux kernel to version 6.6.143, 6.12.93, 6.18.35, or 7.0.12, as these releases contain the necessary security fixes.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages that may indicate memory corruption or unexpected Bluetooth subsystem behavior.

Compensating Controls: Disable Bluetooth services on critical infrastructure hosts where wireless connectivity is not required to eliminate the attack vector.

Public Exploit Available: Unknown

The high severity of this vulnerability necessitates immediate attention for all Linux systems with active Bluetooth stacks. Administrators should prioritize the deployment of the provided kernel patches to prevent potential exploitation and maintain system stability.