Critical Bluetooth Vulnerability in Linux Kernel: CVE-2025-38118
Summary
CVE-2025-38118: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_OP_REMOVE_ADV_MONITOR to not use mgmt_pending_add to avoid crashes like b... Affects linux versions < 6.1.147-1. Fixed in 6.1.147-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports a wide range of functionalities, including process management, memory management, and device control. This vulnerability specifically affects the Bluetooth subsystem, which is responsible for managing Bluetooth devices and connections. The vulnerability arises from a use-after-free (UAF) issue in the management of advertising monitors, potentially leading to system crashes and instability.
Vulnerability Detail
CVE-2025-38118 is a use-after-free vulnerability in the Linux kernel's Bluetooth management code. It occurs in the function mgmt_remove_adv_monitor_complete, where a freed memory address is accessed, leading to potential crashes. This vulnerability can be exploited by an attacker to cause denial of service or to execute arbitrary code, depending on the system's configuration and the attacker's capabilities. The issue was identified in the management of advertising monitors, which are used to manage Bluetooth advertising packets.
How To Fix
Minimum fixed version
6.1.147-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable Bluetooth functionality on their systems until the kernel is updated. This can be done by executing the following command in the terminal:
sudo systemctl stop bluetooth
This will stop the Bluetooth service and prevent any Bluetooth-related operations.
Conclusion
CVE-2025-38118 is a critical vulnerability in the Linux kernel's Bluetooth management subsystem that poses significant risks to system stability and security. Users are strongly advised to update their systems to the latest kernel version to mitigate this issue. Temporary workarounds are available, but the best course of action is to apply the patch as soon as possible.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38118 is a use-after-free vulnerability in the Linux kernel's Bluetooth management code that can lead to system crashes.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerability can lead to denial of service, system crashes, or potentially allow an attacker to execute arbitrary code.
Yes, a patch has been released for the Linux kernel. Users should update their kernel to the latest version to mitigate this vulnerability.
If you cannot update your kernel immediately, consider disabling Bluetooth functionality as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
