Search: CVE-2025-40284

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.1%	CVE-2025-40284Linux kernel · Bluetooth: MGMT: cancel mesh send timer when hdev removed mesh_send_done timer High7.8EPSS 0.1%2025-12-07GCVE DatabaseCVE-2025-40284 A use-after-free vulnerability in the Linux kernel Bluetooth mesh management code was resolved by ensuring the mesh send timer is canceled when the Bluetooth device (hdev) is removed. Failure to cancel this timer could cause a kernel crash if the timer triggers after the device is gone. This issue was observed sporadically in testing and is associated with a KASAN slab-use-after-free bug. EPSS 0.1%Vulnerability #ghsa-5w6m-vxmj-7w4c	GCVE Database	2025-12-07

Page 1 of 1 · 1 duplicate CVE record merged