A kernel bug in the Bluetooth btnxpuart driver allows a memory buffer (skb) to be leaked when the core dump feature is disabled. The leaked skb prevents the device reset recovery routine from running and can lead to kernel memory exhaustion. The vulnerability is a classic memory‑management flaw that could degrade system availability and may support further exploitation by exhausting kernel memory. Based on the description, it is inferred that an attacker with access to the Bluetooth interface can trigger the bug by sending a firmware dump command that executes nxp_process_fw_dump().

The flaw is present in the Linux kernel’s Bluetooth btnxpuart driver, affecting all builds that enable the driver and have CONFIG_DEV_COREDUMP set to "n". No specific version list is provided, but any kernel incorporating the unpatched driver is vulnerable.

The CVSS score is not provided, and the EPSS score is unavailable, but the functional impact of leaking a kernel skb and preventing device recovery suggests a potentially high severity. Because the flaw is triggered via Bluetooth commands, it can be exploited remotely over a wireless interface, likely without requiring elevated privileges. The vulnerability is not listed in the CISA KEV catalog, indicating it may not yet be actively exploited in the wild.