A high-severity use-after-free vulnerability in the Linux kernel Bluetooth subsystem could allow a local authenticated attacker to achieve code execution or system instability.

The flaw exists in the Bluetooth management interface, where improper locking of hci_conn objects allows for a use-after-free condition. An attacker with local access and low privileges can trigger this flaw by initiating specific Bluetooth management commands that dereference pointers after they have been freed.

The vulnerability carries a CVSS score of 7.8, indicating a high risk to system integrity and confidentiality. Successful exploitation allows a local user to escalate privileges or crash the system, potentially leading to unauthorized data access or denial-of-service conditions for critical services relying on the affected kernel.

Immediate Action: Update the Linux kernel to version 6.6.148, 6.12.101, 6.18.42, or 7.1.6, depending on the distribution branch in use.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the Bluetooth stack, particularly following connection or unpairing events.

Compensating Controls: If patching is delayed, restrict access to the Bluetooth subsystem or disable Bluetooth services entirely on high-security systems where such functionality is not required.

Public Exploit Available: Unknown

Given the potential for local privilege escalation and the critical nature of kernel-level vulnerabilities, administrators should prioritize applying the provided kernel patches. Organizations should audit their Linux environments to identify systems running the affected kernel versions and schedule maintenance windows for deployment as soon as vendor-supplied packages are available.