A high-severity use-after-free vulnerability in the Linux kernel Bluetooth stack could allow an unauthenticated adjacent attacker to cause system crashes or potentially execute arbitrary code.

The vulnerability resides in the Bluetooth hci_sync component, where a race condition allows a connection object to be freed while an hci_sync task is still referencing it. An unauthenticated attacker within Bluetooth range can trigger this use-after-free condition.

The CVSS score of 8.8 indicates a high risk to business operations, as successful exploitation may result in a complete system compromise or denial-of-service. Because the vulnerability allows for memory corruption, the potential for arbitrary code execution poses a significant threat to data confidentiality and system integrity. Organizations relying on Linux-based devices with Bluetooth enabled are particularly exposed to this risk.

Immediate Action: Update the Linux kernel to version 7.1.8 or later, or apply the upstream patches provided in the kernel stable tree.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected Bluetooth service restarts, which may indicate exploitation attempts.

Compensating Controls: If patching is not immediately feasible, disable the Bluetooth service on affected systems to eliminate the attack vector.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a critical risk to kernel stability and security. Administrators should prioritize patching the Linux kernel across all affected environments to mitigate the possibility of memory corruption and unauthorized code execution. Given the ease of access for adjacent attackers, testing and deploying the stable kernel update should be completed as part of the next maintenance cycle.