A Use-After-Free vulnerability in the Linux kernel Bluetooth L2CAP subsystem could allow an adjacent attacker to cause system instability or execute arbitrary code.

The vulnerability is a Use-After-Free flaw occurring in the l2cap_le_connect_rsp function. An unauthenticated attacker can exploit this by failing to maintain a proper reference count on a channel, leading to memory corruption when the kernel operates on a freed object.

This vulnerability poses a significant risk to system security, as Use-After-Free flaws are frequently leveraged for privilege escalation or remote code execution. With a CVSS score of 8.8, the potential for total system compromise necessitates urgent attention.

Immediate Action: Apply kernel updates to versions 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later.

Proactive Monitoring: Monitor kernel logs for memory management errors or unexpected Bluetooth service resets.

Compensating Controls: Restrict physical or adjacent access to Bluetooth-enabled hardware to reduce the likelihood of a proximity-based attack.

Public Exploit Available: Unknown

Due to the critical nature of memory corruption vulnerabilities in the kernel, patching is the only reliable mitigation. Administrators should audit their infrastructure for affected kernel versions and schedule maintenance windows to apply the necessary updates immediately.