A Use-After-Free vulnerability in the Linux kernel Bluetooth ISO subsystem could allow an adjacent attacker to trigger memory corruption and compromise system stability.

The vulnerability stems from a failure to clear the iso_data pointer when detaching a connection from the host controller. An unauthenticated attacker can trigger this condition, resulting in a Use-After-Free when the kernel later attempts to free the connection object.

The flaw allows for memory corruption at the kernel level, which is a common vector for achieving elevated privileges or causing a denial of service. Given the CVSS score of 8.8, the impact on business operations could be severe if an attacker successfully gains control over kernel processes.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later.

Proactive Monitoring: Monitor for kernel panics or diagnostic logs related to memory access violations in the Bluetooth stack.

Compensating Controls: Disable unnecessary Bluetooth peripherals and interfaces to limit the attack surface for proximity-based threats.

Public Exploit Available: Unknown

This vulnerability is a high-priority risk due to its potential for kernel-level exploitation. Organizations should prioritize the deployment of the provided security patches to ensure the integrity and stability of their Linux-based systems.