Linux Kernel Bluetooth Subsystem Device Release Vulnerability in Isochronous Listening

Vulnerability

A vulnerability in the Bluetooth subsystem of the Linux kernel has been addressed. The issue arose in the isochronous listening function, where the device handle was not properly released after use. The function 'hci_get_route' retains the device before returning, so the handle should be released with 'hci_dev_put' at the end of 'iso_listen_bis', even if an error occurs.

Impact

Failure to release the device handle properly could lead to resource leaks or undefined behavior in the Bluetooth subsystem.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.