n the Linux kernel, the following vulnerability has been resolved: Bluetooth: vhci: Prevent use-after-free by removing debugfs files early Move the creation of debugfs files into a dedicated function, and ensure they are explicitly removed during vhci_release(), before associated data structures are freed. Previously, debugfs files such as "force_suspend", "force_wakeup", and others were created under hdev->debugfs but not removed in vhci_release(). Since vhci_release() frees the backing vhci_data structure, any access to these files after release would result in use-after-free errors. Although hdev->debugfs is later freed in hci_release_dev(), user can access files after vhci_data is freed but before hdev->debugfs is released.
Configuration 1 (hide)
|
12 Dec 2025, 20:10
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | CWE-416 | |
| First Time |
Linux linux Kernel
Linux |
|
| CPE | cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:* |
|
| References | () https://git.kernel.org/stable/c/1503756fffe76d5aea2371a4b8dee20c3577bcfd - Patch | |
| References | () https://git.kernel.org/stable/c/28010791193a4503f054e8d69a950ef815deb539 - Patch | |
| References | () https://git.kernel.org/stable/c/7cc08f2f127b9a66f46ea918e34353811a7cb378 - Patch | |
| References | () https://git.kernel.org/stable/c/bd75eba88e88d7b896b0c737b02a74a12afc235f - Patch |
22 Sep 2025, 21:23
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2025-09-19 16:15
Updated : 2026-01-14 20:16
NVD link : CVE-2025-39861
Mitre link : CVE-2025-39861
CVE.ORG link : CVE-2025-39861
JSON object : View
Use After Free