This vulnerability involves a race condition (CWE-362) in the Linux kernel's net/bluetooth subsystem within the functions that set minimum and maximum connection and advertising intervals. Improper synchronization in these functions can cause abnormal behavior in L2CAP connections or broadcasts, which may result in denial of service conditions. The affected Linux kernel version is 4.0-rc1. The CVSS 3.1 base score is 4.6, reflecting a medium severity with attack vector requiring adjacent network access, high attack complexity, high privileges, and user interaction. No official remediation or patch has been documented in the provided data.

The impact of this vulnerability is a potential denial of service caused by abnormal behavior in Bluetooth L2CAP connections or broadcasts due to a race condition. There is no indication of confidentiality or integrity compromise. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor Linux kernel updates and apply any forthcoming patches addressing this issue. No vendor advisory states that no action is required or that the issue is already mitigated.