CVE-2025-40309 | Linux Kernel up to 6.17.7 Bluetooth net/bluetooth/sco.c sco_conn_free use after free

December 8, 2025 Yanac

A vulnerability has been found in Linux Kernel up to 6.17.7 and classified as critical. This affects the function sco_conn_free of the file net/bluetooth/sco.c of the component Bluetooth. Performing manipulation results in use after free.

This vulnerability was named CVE-2025-40309. The attack needs to be approached within the local network. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More