A vulnerability in the Linux kernel Bluetooth hci_sync component may lead to system instability or denial of service due to improper workqueue handling during device shutdown.

This is an improper synchronization vulnerability within the Bluetooth hci_sync module. An unauthenticated local or adjacent attacker can trigger a race condition during the device close or reset path, potentially leading to a kernel panic or unauthorized memory access.

A successful exploit could result in a denial of service (system crash) or potentially arbitrary code execution in the kernel context. Given the CVSS score of 8.8, this represents a significant risk to system availability and integrity, particularly for servers or embedded devices relying on Bluetooth connectivity.

Immediate Action: Update the Linux kernel to version 6.12.93, 6.18.35, 7.0.12, or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops, stack traces, or recurring Bluetooth service crashes that may indicate exploitation attempts.

Compensating Controls: If patching is not immediately feasible, disable the Bluetooth service if it is not required for system operations to eliminate the attack surface.

Public Exploit Available: Unknown

This vulnerability presents a high risk to kernel stability. Administrators should prioritize applying the provided kernel patches as soon as they are integrated into their respective distribution repositories to prevent potential system compromise.