https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:51:33 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40284 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: MGMT: cancel mesh send timer when hdev removed</p> <p>mesh_send_done timer is not canceled when hdev is removed, which causes crash if the timer triggers after hdev is gone.</p> <p>Cancel the timer when MGMT removes the hdev, like other MGMT timers.</p> <p>Should fix the BUG: sporadically seen by BlueZ test bot (in &#34;Mesh - Send cancel - 1&#34; test).</p> <p>Log: ------ BUG: KASAN: slab-use-after-free in run_timer_softirq+0x76b/0x7d0 ... Freed by task 36: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_save_free_info+0x3a/0x60 __kasan_slab_free+0x43/0x70 kfree+0x103/0x500 device_release+0x9a/0x210 kobject_put+0x100/0x1e0 vhci_release+0x18b/0x240 ------</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: MGMT: cancel mesh send timer when hdev removed</p> <p>mesh_send_done timer is not canceled when hdev is removed, which causes crash if the timer triggers after hdev is gone.</p> <p>Cancel the timer when MGMT removes the hdev, like other MGMT timers.</p> <p>Should fix the BUG: sporadically seen by BlueZ test bot (in &#34;Mesh - Send cancel - 1&#34; test).</p> <p>Log: ------ BUG: KASAN: slab-use-after-free in run_timer_softirq+0x76b/0x7d0 ... Freed by task 36: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_save_free_info+0x3a/0x60 __kasan_slab_free+0x43/0x70 kfree+0x103/0x500 device_release+0x9a/0x210 kobject_put+0x100/0x1e0 vhci_release+0x18b/0x240 ------</p> https://vulnerability.circl.lu/vuln/cve-2025-40284