A locking vulnerability in the Linux kernel Bluetooth ISO subsystem could allow an adjacent attacker to trigger memory corruption and potentially achieve system compromise.

This is a race condition vulnerability within the Bluetooth ISO connection handling. An unauthenticated attacker in adjacent network proximity can trigger the flaw by failing to properly lock the socket during the connection process, leading to a race condition.

Successful exploitation of this vulnerability could lead to arbitrary code execution or a system crash, resulting in significant service disruption. Given the CVSS score of 8.8, this flaw represents a high risk to availability and system integrity, particularly for devices relying on Bluetooth connectivity.

Immediate Action: Update the Linux kernel to version 6.18.44, 7.1.8, or later, as these versions contain the necessary security patches.

Proactive Monitoring: Review system logs for Bluetooth service crashes or unexpected kernel oops messages.

Compensating Controls: Disable Bluetooth services on systems where they are not strictly required to eliminate the attack surface.

Public Exploit Available: Unknown

The high CVSS score highlights the severity of this kernel-level flaw. IT administrators should prioritize patching Linux systems that utilize Bluetooth functionality to prevent potential remote code execution or denial of service attacks.