A high-severity use-after-free vulnerability in the Linux kernel Bluetooth L2CAP subsystem permits local attackers to trigger kernel crashes, posing a risk of system instability and potential privilege escalation.

This is a use-after-free vulnerability occurring during L2CAP socket operations. An attacker with local access can exploit improper reference handling in the l2cap_sock_setsockopt and getsockopt functions to trigger a kernel crash or data race, as the kernel attempts to access freed or invalidated memory structures related to hci_conn.

The vulnerability carries a CVSS score of 7.8, indicating a high risk for local systems. Successful exploitation can lead to a complete system denial of service, forcing reboots and resulting in significant operational downtime. Furthermore, since the flaw resides within the kernel, there is a potential for an attacker to escalate privileges or compromise the integrity of the host operating system.

Immediate Action: Update the Linux kernel to version 7.2.6 or the relevant patched stable releases (5.11, 5.16, 6.2, or 6.7) as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the Bluetooth subsystem or L2CAP socket errors, which may indicate attempted exploitation.

Compensating Controls: If patching is not immediately feasible, restrict access to the Bluetooth subsystem by disabling the Bluetooth module or limiting kernel-level access to authorized users only.

Public Exploit Available: No (exploit_available: false)

Given the severity of kernel-level vulnerabilities, administrators should prioritize applying the kernel updates provided by their respective distributions. The risk of system instability and potential escalation warrants a prompt deployment of the fix to maintain system security and uptime.