CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's Bluetooth subsystem, specifically related to improper handling of connection data during disconnection processes. This oversight can lead to a use-after-free condition, potentially allowing an attacker to exploit the system by accessing freed memory, which could compromise system stability or security. Organizations utilizing Linux systems with Bluetooth capabilities should prioritize addressing this issue to mitigate potential risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso_data always when detaching conn from hcon When setting conn->hcon = NULL, also conn->hcon->iso_data = NULL is necessary, otherwise later iso_conn_free() will UAF. Fix clearing of iso_data in iso_sock_disconn() Fixes KASAN: slab-use-after-free in iso_conn_hold_unless_zero on iso_sock_release() followed by hci_abort_conn_sync().