A recently assigned Linux-kernel vulnerability, CVE-2025-22007, fixes a subtle but consequential Bluetooth error-handling bug in net/bluetooth/6lowpan.c where the function chan_alloc_skb_cb() could return NULL instead of the kernel’s standard error-pointer value; that incorrect return allows a...
A subtle but real kernel bug affecting Bluetooth 6LoWPAN support in Linux — tracked as CVE-2025-40282 — has been identified and patched: the kernel failed to reset the link-local (MAC) header on received IPv6 packets in the uncompressed receive path, allowing a crafted packet to trigger a kernel...