CVE-2025-40284: Bluetooth: MGMT: cancel mesh send timer when hdev removed
Bluetooth: MGMT: cancel mesh send timer when hdev removed
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify Bluetooth MGMT code so that when MGMT removes the hdev, it cancels the mesh_send_done timer (i.e., cancel the timer when MGMT removes the hdev, like other MGMT timers) to prevent the timer from triggering after hdev is gone.
Linux kernel Bluetooth MGMT (Mesh - Send cancel - 1) mesh_send_done timer cancellation on hdev removal = cancel mesh_send_done timer when MGMT removes hdev
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40284?
CVE-2025-40284 has been categorized as a medium severity vulnerability due to its potential to cause crashes.
How do I fix CVE-2025-40284?
To fix CVE-2025-40284, ensure you update to a patched version of the Linux kernel where the mesh_send_done timer is appropriately managed.
What systems are affected by CVE-2025-40284?
CVE-2025-40284 affects certain versions of the Linux kernel that utilize Bluetooth management functionality.
What is the impact of CVE-2025-40284?
The impact of CVE-2025-40284 can result in a system crash if the mesh_send_done timer triggers after the handling device has been removed.
When was CVE-2025-40284 disclosed?
CVE-2025-40284 was disclosed in 2025 as a part of regular security updates to the Linux kernel.