CVE-2025-40141
High
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_free This attempt to fix similar issue to sco_conn_free where if the conn->sk is not set to NULL may lead to UAF on iso_conn_free.
SeverityHigh
CVSS8.0
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linuxeba6d787ec117a5d2c60f9644e0a39c18542b6be, 5319145a07d8bf5b0782b25cb3115825689d42bb, 80689777919f02328eb873769de4647c9dd3e371, c92ad1a155ccfa38b87bd1d998287e1c0a24248d, 9950f095d6c875dbe0c9ebfcf972ec88fdf26fc8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | ccf74f2390d60a2f9a75ef496d2564abb478f46a ≤ v < eba6d787ec117a5d2c60f9644e0a39c18542b6be, ccf74f2390d60a2f9a75ef496d2564abb478f46a ≤ v < 5319145a07d8bf5b0782b25cb3115825689d42bb, ccf74f2390d60a2f9a75ef496d2564abb478f46a ≤ v < 80689777919f02328eb873769de4647c9dd3e371, ccf74f2390d60a2f9a75ef496d2564abb478f46a ≤ v < c92ad1a155ccfa38b87bd1d998287e1c0a24248d, ccf74f2390d60a2f9a75ef496d2564abb478f46a ≤ v < 9950f095d6c875dbe0c9ebfcf972ec88fdf26fc8, 6.0 | eba6d787ec117a5d2c60f9644e0a39c18542b6be, 5319145a07d8bf5b0782b25cb3115825689d42bb, 80689777919f02328eb873769de4647c9dd3e371, c92ad1a155ccfa38b87bd1d998287e1c0a24248d, 9950f095d6c875dbe0c9ebfcf972ec88fdf26fc8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.