Linux Kernel Bluetooth Circular Lock Vulnerability in ISO Connection Synchronization

A vulnerability in the Linux kernel's Bluetooth implementation has been addressed, specifically related to circular locking dependencies in ISO connection synchronization. The issue arose because the socket lock was not released before calling a function that required locking the hardware device lock, leading to potential deadlocks. This vulnerability was present in Linux kernel versions through 6.12.0-rc6.

Impact

Exploitation of this vulnerability could lead to a deadlock situation, where two tasks are unable to proceed because each is waiting for the other to release a lock, potentially causing system hangs or unresponsiveness.