CVE-2025-38593: Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
Bluetooth: hcisync: fix double free in 'hcidiscoveryfilterclear()'
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Add locking around the kfree() call in hci_discovery_filter_clear() and set the freed pointer (uuids) to NULL after freeing to prevent the reported double free race.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38593?
CVE-2025-38593 is classified as a moderate severity vulnerability due to the potential for a double free condition in the Bluetooth component of the Linux kernel.
What systems are affected by CVE-2025-38593?
CVE-2025-38593 affects the Linux kernel, particularly versions with the Bluetooth functionality.
How do I fix CVE-2025-38593?
To fix CVE-2025-38593, it is recommended to update your Linux kernel to a version where this vulnerability has been resolved.
What is the nature of the vulnerability in CVE-2025-38593?
CVE-2025-38593 is a double free vulnerability that occurs in the 'hci_discovery_filter_clear()' function in the Bluetooth subsystem of the Linux kernel.
Could CVE-2025-38593 lead to system instability?
Yes, CVE-2025-38593 could potentially lead to system instability if exploited due to the double free condition.