A use-after-free vulnerability in the Linux kernel Bluetooth subsystem could allow a local attacker to compromise system stability or escalate privileges.

The vulnerability resides in the hci_connect_pa_sync callback within the Bluetooth hci_sync component. It occurs when a connection object is freed while a sync task is still referencing it, requiring authenticated local access.

This flaw carries a CVSS score of 7.8, reflecting its potential for complete system compromise. If exploited, an attacker could achieve arbitrary code execution or cause a kernel panic, leading to significant service disruption and loss of data confidentiality.

Immediate Action: Apply the vendor-provided kernel update to version 7.1.8 or later to resolve the use-after-free condition.

Proactive Monitoring: Monitor Bluetooth-related kernel logs for unusual activity or unexpected connection drops that might signal an exploitation attempt.

Compensating Controls: Disable the Bluetooth subsystem if it is not required for system operations to reduce the attack surface.

Public Exploit Available: No

Given the potential for privilege escalation and the high severity score, immediate patching is strongly recommended. Systems that rely on Bluetooth connectivity should be prioritized for updates.