Linux Kernel Bluetooth Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the Bluetooth subsystem of the Linux kernel. This issue occurs when the kernel receives a HCI_Synchronous_Connection_Complete event for a Bluetooth device address (BDADDR) that is already associated with a Low Energy (LE) connection. The vulnerability arises because the connection's link is NULL, leading to a crash when the event is processed.

Impact

Exploitation of this vulnerability causes a kernel crash due to a null pointer dereference, which can lead to a denial of service by causing the system to become unresponsive or to reboot.