A high-severity use-after-free vulnerability in the Linux kernel Bluetooth subsystem poses a significant risk of remote code execution or system instability for affected devices.

This vulnerability exists in the Bluetooth ISO connection handling logic where dangling hcon references occur after a connection deletion. An unauthenticated attacker within proximity can trigger this flaw, leading to potential memory corruption or arbitrary code execution.

Successful exploitation of this vulnerability could result in a full system compromise, including unauthorized data access and denial of service. With a CVSS score of 8.8, this flaw represents a high risk to organizational infrastructure, particularly for systems utilizing Bluetooth-enabled hardware. The potential for code execution within the kernel context makes this an urgent security priority.

Immediate Action: Update the Linux kernel to version 6.18.44, 7.1.8, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unusual Bluetooth stack crashes or kernel panic events that may indicate attempted exploitation.

Compensating Controls: If patching is not immediately feasible, consider disabling Bluetooth functionality on critical systems that do not require wireless connectivity to eliminate the attack vector.

Public Exploit Available: Unknown

The severity of this vulnerability, combined with its location within the kernel memory management subsystem, necessitates immediate attention. Security administrators must prioritize testing and deploying the provided kernel updates across all affected environments to prevent potential exploitation. Failure to patch these systems leaves them vulnerable to high-impact attacks from attackers within Bluetooth range.