CVE-2025-40283
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF There is a KASAN: slab-use-after-free read in btusb_disconnect(). Calling "usb_driver_release_interface(&btusb_driver, data->intf)" will free the btusb data associated with the interface. The same data is then used later in the function, hence the UAF. Fix by moving the accesses to btusb data to before the data is free'd.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| fd913ef7ce619467c6b0644af48ba1fec499c623 | affected | git | 297dbf87989e09af98f81f2bcb938041785557e8 | Unavailable | None listed |
| fd913ef7ce619467c6b0644af48ba1fec499c623 | affected | git | f858f004bc343a7ae9f2533bbb2a3ab27428532f | Unavailable | None listed |
| fd913ef7ce619467c6b0644af48ba1fec499c623 | affected | git | 7a6d1e740220ff9dfcb6a8c994d6ba49e76db198 | Unavailable | None listed |
| fd913ef7ce619467c6b0644af48ba1fec499c623 | affected | git | 5dc00065a0496c36694afe11e52a5bc64524a9b8 | Unavailable | None listed |
| fd913ef7ce619467c6b0644af48ba1fec499c623 | affected | git | 1c28c1e1522c773a94e26950ffb145e88cd9834b | Unavailable | None listed |
| fd913ef7ce619467c6b0644af48ba1fec499c623 | affected | git | 95b9b98c93b1c0916a3d4cf4540b7f5d69145a0d | Unavailable | None listed |
| fd913ef7ce619467c6b0644af48ba1fec499c623 | affected | git | a2610ecd9fd5708be8997ca8f033e4200c0bb6af | Unavailable | None listed |
| fd913ef7ce619467c6b0644af48ba1fec499c623 | affected | git | 23d22f2f71768034d6ef86168213843fc49bf550 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.11 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.11 | Unavailable | None listed |
| 5.4.302 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.247 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.197 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.159 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.117 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.59 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.17.9 | unaffected | semver | Unavailable | 6.17.* | None listed |
| 6.18 | unaffected | original_commit_for_fix | Unavailable | * | None listed |