A newly assigned CVE, CVE-2025-40294, identifies an out‑of‑bounds (OOB) access in the Linux kernel’s Bluetooth management path that can cause memory corruption and crashes when userland supplies overly large advertising‑pattern lengths. The defect lives in the MGMT layer’s...