CVE-2025-40318

CVE-2025-40318 : In the Linux kernel, a race in Bluetooth hci_sync code could lead to a Use-After-Free via double list_del when hci_cmd_sync_dequeue_once and hci_cmd_sync_work run concurrently. The root cause is a lookup followed by cancellation performed under two separate lock sections. The pub...

CVE-2024-53207 Bluetooth: MGMT: Fix possible deadlocks

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible deadlocks This fixes possible deadlocks like the following caused by hcicmdsyncdequeue causing the destroy function to run: INFO: task kworker/u19:0:143 blocked for more than 120 seconds. Tainted: G ...