A use-after-free vulnerability in the Linux kernel Bluetooth subsystem poses a high risk of local or adjacent memory corruption and potential system instability.

The vulnerability exists in the l2cap_sock_new_connection_cb function, where a use-after-free condition occurs due to the premature release of a socket structure. An attacker within Bluetooth range can potentially trigger this condition, resulting in an impact on system stability or unauthorized access.

The use-after-free flaw carries a CVSS score of 8.8, reflecting its potential to compromise system integrity and availability. In environments where Bluetooth is enabled, this vulnerability could be leveraged to crash systems or potentially execute code, necessitating urgent kernel updates to prevent exploitation.

Immediate Action: Update your Linux kernel to the latest stable versions: 6.1.178, 6.6.145, 6.12.97, or 6.18.40.

Proactive Monitoring: Monitor system logs for kernel-level errors or Bluetooth service crashes that may indicate the exploitation of memory management flaws.

Compensating Controls: If kernel updates cannot be applied immediately, disable the Bluetooth service on affected systems to eliminate the attack vector.

Public Exploit Available: Unknown

Kernel maintenance is critical for infrastructure security. Administrators should verify their current kernel version against the fixed releases and coordinate a reboot cycle to apply these patches as soon as possible to mitigate the risk of local or adjacent exploitation.