A critical use-after-free vulnerability in the Linux kernel Bluetooth subsystem could allow an attacker to cause a system crash or execute arbitrary code.

The vulnerability is a race condition leading to a use-after-free scenario in the abort_conn_sync function. It is accessible by an unauthenticated attacker via the Bluetooth interface.

With a CVSS score of 8.8, this flaw represents a significant threat to organizational infrastructure. Exploitation may result in total system failure or unauthorized privilege escalation, disrupting critical services and potentially exposing sensitive data.

Immediate Action: Apply the latest kernel security updates, specifically ensuring the kernel is updated to 6.6.151, 6.12.103, 6.18.44, or 7.1.8.

Proactive Monitoring: Review system audit logs for repeated Bluetooth-related connection errors or unexpected process terminations.

Compensating Controls: Deploy host-based security policies that restrict Bluetooth interface access to only authorized users or hardware peripherals.

Public Exploit Available: No

Immediate patching is required to mitigate this high-risk kernel flaw. Organizations should coordinate with their Linux distribution maintainers to ensure that the appropriate stable kernel versions are deployed across all production environments.