CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
Bluetooth: Fix use-after-free in l2capsockcleanuplisten()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel Bluetooth L2CAPto a version that resolves this vulnerability.Patch cited commit
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39860?
CVE-2025-39860 is classified as a high-severity vulnerability due to its impact on memory management.
How do I fix CVE-2025-39860?
To fix CVE-2025-39860, update your Linux kernel to the latest stable version provided by your distribution.
What systems are affected by CVE-2025-39860?
CVE-2025-39860 affects various versions of the Linux kernel that support Bluetooth functionalities.
What is the nature of CVE-2025-39860?
CVE-2025-39860 is a use-after-free vulnerability in the l2cap_sock_cleanup_listen function of the Linux kernel Bluetooth stack.
Is there a known exploit for CVE-2025-39860?
As of now, there are no known public exploits for CVE-2025-39860, but it is recommended to patch the vulnerability promptly.