The vulnerability in the Bluetooth management subsystem of the Linux kernel allows an attacker to trigger a use‑after‑free condition by manipulating the unpair_device and disconnect_sync functions. The flaw arises from dereferencing RCU‑protected pointers outside appropriate critical sections, which can corrupt memory. If an attacker can exploit this UAF, they could potentially execute arbitrary code or crash the system. This weakness is a classic example of CWE‑416.

The affected product is the Linux kernel itself, across all vendor builds that include the Bluetooth stack before the patch. Variations of all Linux kernel versions prior to the inclusion of the patch are therefore impacted; specific release numbers are not included in the advisory.

The CVSS score is not supplied, and EPSS is unavailable, so the exact exploitation probability is unknown. Because the flaw requires a local context to trigger the dereference, a privileged or local attacker with the ability to interact with the Bluetooth stack can exercise the condition. No public exploits are known, and the vulnerability is not flagged in CISA KEV. Nevertheless, a use‑after‑free can lead to privilege escalation or denial of service.