Bluetooth SCO Connection Lockup Vulnerability in Linux Kernel
Summary
CVE-2025-38099: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken A SCO connection without the proper voice_setting can cause the controller to... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, including various distributions of Debian. It manages system resources and hardware interactions, providing essential services for applications. This vulnerability affects the Bluetooth subsystem, specifically the SCO (Synchronous Connection-Oriented) support, which is crucial for voice communication over Bluetooth. The vulnerability arises when the READ_VOICE_SETTING is unsupported or broken, leading to potential system lockups.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified where a SCO connection can cause the Bluetooth controller to lock up if the proper voice setting is not supported or is broken. This issue can lead to significant disruptions in Bluetooth communication, particularly affecting devices that rely on voice data transmission. The vulnerability is rooted in the handling of voice settings within the Bluetooth stack, which fails to appropriately manage unsupported configurations.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users can avoid using SCO connections until the patch is applied to mitigate the risk of system lockup.
Conclusion
The Bluetooth SCO connection vulnerability in the Linux kernel poses a risk of system lockup due to improper handling of voice settings. Users are advised to update their systems to the latest patched version to mitigate this risk. Regular monitoring with tools like Vulert can help ensure that your software remains secure against such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability can cause the Bluetooth controller to lock up, leading to disruptions in voice communication and potential system instability.
The vulnerability affects Linux packages in Debian 11, 12, and 13, with specific fixes available for Debian 13.
You can use Vulert, which monitors open-source vulnerabilities in your software. By using the manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
Yes, a patch is available for Debian 13 in version 6.12.32-1. Users of Debian 11 and 12 should check for updates as they become available.
If an immediate update is not possible, avoid using SCO connections to prevent potential lockups until the patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
