In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
Move the creation of debugfs files into a dedicated function, and ensure
they are explicitly removed during vhci_release(), before associated
data structures are freed.
Previously, debugfs files such as "force_suspend", "force_wakeup", and
others were created under hdev->debugfs but not removed in
vhci_release(). Since vhci_release() frees the backing vhci_data
structure, any access to these files after release would result in
use-after-free errors.
Although hdev->debugfs is later freed in hci_release_dev(), user can
access files after vhci_data is freed but before hdev->debugfs is
released.
References
Configurations
Configuration 1 (hide)
|
History
12 Dec 2025, 20:10
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-416 | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:* |
|
| First Time |
Linux
Linux linux Kernel |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | () https://git.kernel.org/stable/c/1503756fffe76d5aea2371a4b8dee20c3577bcfd - Patch | |
| References | () https://git.kernel.org/stable/c/28010791193a4503f054e8d69a950ef815deb539 - Patch | |
| References | () https://git.kernel.org/stable/c/7cc08f2f127b9a66f46ea918e34353811a7cb378 - Patch | |
| References | () https://git.kernel.org/stable/c/bd75eba88e88d7b896b0c737b02a74a12afc235f - Patch |
19 Sep 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-19 16:15
Updated : 2025-12-12 20:10
NVD link : CVE-2025-39861
Mitre link : CVE-2025-39861
CVE.ORG link : CVE-2025-39861
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free