CVE-2025-39982: 
Linux Kernel vulnerability analysis and mitigation

A use-after-free (UAF) vulnerability has been discovered in the Linux kernel's Bluetooth subsystem, specifically in the hciaclcreateconnsync function. The vulnerability was disclosed on October 15, 2025, and affects the Linux kernel version 6.16.0-rc7 and potentially other versions. The issue occurs when a connection pending command submission (conn->state == BT_OPEN) may be freed while still in use (NVD CVE).

The vulnerability exists in the net/bluetooth/hci_sync.c file at line 6861, where a use-after-free condition occurs during the connection creation process. The issue manifests when writing data of size 2 at a specific memory address (ffff88805ffcc038) by the kworker process. The bug was identified through KASAN (Kernel Address Sanitizer) detection mechanism (NVD CVE).

The vulnerability could potentially lead to memory corruption in the Linux kernel's Bluetooth subsystem, which may result in system crashes, information disclosure, or potential privilege escalation. The issue affects the kernel's ability to safely manage Bluetooth connections (NVD CVE).

The vulnerability has been resolved in the Linux kernel through a patch that fixes the UAF issue in hciaclcreateconnsync. The fix also addresses similar potential issues in hcilecreateconnsync (NVD CVE).