A use-after-free vulnerability in the Linux kernel Bluetooth ISO implementation could allow an unauthenticated attacker to compromise system stability.

The function iso_recv_frame improperly releases a lock while still requiring a reference to an object (sk), resulting in a use-after-free scenario. This flaw is accessible to unauthenticated attackers positioned on the adjacent network.

The vulnerability carries a CVSS score of 8.8, reflecting the potential for significant impact on system integrity and availability. Exploitation could allow an attacker to trigger kernel panics or potentially gain unauthorized control over affected systems by corrupting kernel memory.

Immediate Action: Update the Linux kernel to version 6.1.176, 6.6.143, 6.12.93, or 6.18.35 to remediate the vulnerability.

Proactive Monitoring: Review system logs for unusual Bluetooth-related crash reports or kernel memory errors that could indicate an exploitation attempt.

Compensating Controls: If patching is delayed, restrict Bluetooth access to authorized devices or disable the Bluetooth service entirely on high-risk systems.

Public Exploit Available: Unknown

Given the CVSS score and the nature of kernel-level vulnerabilities, organizations should treat this issue with urgency. Applying the vendor-provided security updates is the only definitive way to mitigate this risk.