VDB

DEBIAN-CVE-2025-40141

DEBIAN-CVE-2025-40141 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_free This attempt to fix similar issue to sco_conn_free where if the conn->sk is not set to NULL may lead to UAF on iso_conn_free.

Affected Products

VendorProductVersions
Debian:13linux6.12.57-1, 6.12.48-1, 6.12.43-1
Debianlinux
Debian:11linux-6.1*, 6.1.153-1~deb11u1, 6.1.148-1~deb11u1
Debian:14linux6.16.7-1, 6.16.8-1, 6.16.9-1
Debian:12linux6.1.82-1, *, 0

Exploit Intelligence

Timeline

  • Nov 12, 2025 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›