A critical vulnerability in the Linux kernel Bluetooth HIDP implementation exposes systems to potential remote code execution or system instability by processing malformed frames.

This is an input validation vulnerability where the hidp_recv_ctrl_frame and hidp_recv_intr_frame functions fail to verify the existence of a transaction header before reading data. The attacker is unauthenticated as this occurs at the network/link layer.

Successful exploitation allows an adjacent attacker to trigger memory corruption, which may lead to a system crash or arbitrary code execution. Given the CVSS score of 8.8, this represents a significant risk to the integrity and availability of affected Linux systems.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected Bluetooth stack restarts.

Compensating Controls: Disable the Bluetooth subsystem if it is not required for system operations to eliminate the attack surface.

Public Exploit Available: No

The high severity of this vulnerability necessitates immediate patching of all exposed Linux systems. Administrators should prioritize updating the kernel to the latest stable release to mitigate the risk of exploitation.