A race condition in the Linux kernel Bluetooth subsystem may allow an unauthenticated attacker to trigger a use-after-free, leading to system instability or arbitrary code execution.

This vulnerability is a race condition within the Bluetooth ISO connection management code, specifically involving iso_conn_del and iso_chan_del functions. An unauthenticated attacker within proximity can trigger this race to cause a double-put of the connection object, resulting in a use-after-free condition.

The vulnerability carries a CVSS score of 8.8, indicating a high severity risk. Successful exploitation could allow an attacker to crash the system, causing significant downtime, or potentially gain unauthorized control over the affected host, leading to data compromise or system-wide unauthorized access.

Immediate Action: Update the Linux kernel to version 6.18.44, 7.1.8, or later versions where the fix has been backported.

Proactive Monitoring: Monitor Bluetooth traffic for anomalous connection patterns or frequent resets that may indicate attempts to trigger race conditions.

Compensating Controls: If patching is delayed, disable the Bluetooth subsystem if it is not required for critical business operations.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the critical nature of the Linux kernel, organizations should prioritize patching affected systems. Ensure that kernel updates are tested in a staging environment before deployment to production to prevent system instability.