A memory management flaw in the Linux kernel Bluetooth subsystem could allow an authenticated local attacker to cause a system crash or potentially execute arbitrary code.

The vulnerability exists in the hci_past_sync callback within the Bluetooth subsystem, where improper handling of connection references leads to the use of freed pointers. This requires an authenticated attacker with local access to the system.

This vulnerability carries a CVSS score of 8.0, reflecting its potential for severe impact on system availability and integrity. A successful exploit could lead to kernel panics, resulting in denial-of-service, or potentially allow an attacker to escalate privileges or manipulate system memory. In enterprise environments, this poses a risk to server stability and the security of sensitive data processed by the kernel.

Immediate Action: Update the Linux kernel to version 7.1.8 or later, or apply the specific stable branch fixes provided by the vendor.

Proactive Monitoring: Monitor kernel logs for Bluetooth-related errors or recurring system crashes that may indicate exploitation attempts.

Compensating Controls: Restrict access to Bluetooth hardware and kernel-level interfaces to highly privileged users only, and disable the Bluetooth subsystem if it is not required for production operations.

Public Exploit Available: Unknown.

Kernel vulnerabilities of this nature require prompt attention to maintain system stability and security. Administrators should verify their current kernel version and apply the recommended updates immediately to mitigate the risk of local exploitation.