What happened
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices.
Affected versions
Red Hat Enterprise Linux 8: 2.6.24 through before 4.14.326 (semver); 4.15 through before 4.19.295 (semver); 4.20 through before 5.4.257 (semver); 5.5 through before 5.10.195 (semver); 5.11 through before 5.15.131 (semver); 5.16 through before 6.1.52 (semver); 6.2 through before 6.3 (semver); h300s; h410c; h410s; h500s; h700s; before 6.3+rc4 (custom); 5.10.178-3 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.