The vulnerability manifests as a use‑after‑free in the Bluetooth L2CAP module of the Linux kernel. When a userspace socket is closed while the kernel is handling an HCI disconnect, the cleanup routine accesses a previously freed child socket, producing a kernel panic. The official description does not explicitly state privilege escalation, but based on the nature of the use‑after‑free, it is inferred that an attacker could potentially execute arbitrary code or gain local privilege escalation by triggering this race condition.

All Linux kernel builds that include the Bluetooth L2CAP implementation are potentially affected. No specific kernel versions are listed, so any unpatched kernel running Bluetooth can be vulnerable. This spans servers, desktops, embedded devices, and networking gear that enable Bluetooth with an older kernel.

CVSS score of 8 indicates high severity, while EPSS less of wild exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a local or Bluetooth‑based race condition between a userspace close is based on the description. Exploitation would require privilege to run a userspace program or access a Bluetooth interface, and a successful exploit could lead to a kernel panic and potentially privilege escalation.