Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb – revert the use of devmkzalloc in btusb This change reverts to the behavior described in commit 98921dbd00c4e “Bluetooth: Use devmkzalloc in btusb.c file”. In btusbprobe, we use devmkzalloc to allocate the btusb...

CVE-2025-71082

The CVE affects the Linux kernel Bluetooth BTUSB path. The root cause is using devm_kzalloc in btusb_probe, which ties btusb data lifetime to a single driver interface, causing unsafe frees on disconnect when multiple interfaces exist. The fix is to revert to explicit memory freeing (don’t use de...