CVE-2025-40213: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.159.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40213?
CVE-2025-40213 is categorized as a high-severity vulnerability due to the potential for crashes in the Linux kernel.
How do I fix CVE-2025-40213?
To fix CVE-2025-40213, you should update the Linux kernel to the latest version where the vulnerability has been patched.
What types of systems are affected by CVE-2025-40213?
CVE-2025-40213 affects all systems running vulnerable versions of the Linux kernel with Bluetooth capabilities.
What are the potential consequences of CVE-2025-40213 if exploited?
If exploited, CVE-2025-40213 could lead to system crashes and instability, impacting availability and service continuity.
Is there a workaround for CVE-2025-40213?
Currently, the best approach is to apply the kernel update as there are no known workarounds for CVE-2025-40213.