An improper reference counting flaw in the Linux kernel Bluetooth subsystem may allow an unauthenticated attacker to trigger a use-after-free, threatening system integrity.

The function iso_conn_ready fails to hold the socket reference or acquire the necessary lock when dereferencing the socket. An unauthenticated attacker can exploit this race condition during a concurrent close operation, leading to a use-after-free vulnerability.

The CVSS score of 8.8 highlights the high severity of this memory management flaw. Exploitation can lead to system crashes or potential arbitrary code execution, jeopardizing the confidentiality, integrity, and availability of the affected system.

Immediate Action: Update the Linux kernel to version 6.18.44, 7.1.8, or later versions.

Proactive Monitoring: Monitor system logs for signs of memory corruption or unexpected process termination in Bluetooth-related services.

Compensating Controls: Apply kernel hardening measures to mitigate the impact of memory corruption vulnerabilities if immediate patching is not possible.

Public Exploit Available: No (exploit_available: false)

Security teams should prioritize the application of kernel patches to address this use-after-free vulnerability. Given the potential for system-wide compromise, prompt remediation is essential to mitigate the risk posed by this high-severity flaw.