This vulnerability in the Linux kernel Bluetooth stack involved a null pointer dereference in the hci_abort_conn() function. The function read hdev->sent_cmd without verifying it was non-NULL when a connection was pending, leading to a potential general protection fault in the receive path. The resolution introduced a per-connection flag to track the create connection command state and routed cancellation through a dedicated function holding appropriate locks to ensure atomicity. This prevents cancelling unrelated commands and avoids use-after-free conditions by holding references across command completion.

The vulnerability could cause a null pointer dereference resulting in a general protection fault, potentially leading to a denial of service (kernel crash) on affected systems using the Linux kernel Bluetooth stack. There is no indication of code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to address this vulnerability. Users should apply the official kernel updates that include this patch. Since this is not a cloud service, remediation depends on updating the affected Linux kernel versions once the patch is released. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the current remediation guidance.