In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: Fix UAF on mgmtremoveadvmonitorcomplete
This reworks MGMTOPREMOVEADVMONITOR to not use mgmtpendingadd to avoid crashes like bellow:
================================================================== BUG: KASAN: slab-use-after-free in mgmtremoveadvmonitorcomplete+0xe5/0x540 net/bluetooth/mgmt.c:5406 Read of size 8 at addr ffff88801c53f318 by task kworker/u5:5/5341
CPU: 0 UID: 0 PID: 5341 Comm: kworker/u5:5 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: hci0 hcicmdsyncwork Call Trace: <TASK> dumpstacklvl+0x189/0x250 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:408 [inline] printreport+0xd2/0x2b0 mm/kasan/report.c:521 kasanreport+0x118/0x150 mm/kasan/report.c:634 mgmtremoveadvmonitorcomplete+0xe5/0x540 net/bluetooth/mgmt.c:5406 hcicmdsyncwork+0x261/0x3a0 net/bluetooth/hcisync.c:334 processonework kernel/workqueue.c:3238 [inline] processscheduledworks+0xade/0x17b0 kernel/workqueue.c:3321 workerthread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x711/0x8a0 kernel/kthread.c:464 retfromfork+0x3fc/0x770 arch/x86/kernel/process.c:148 retfromforkasm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK>
Allocated by task 5987: kasansavestack mm/kasan/common.c:47 [inline] kasansavetrack+0x3e/0x80 mm/kasan/common.c:68 poisonkmallocredzone mm/kasan/common.c:377 [inline] _kasankmalloc+0x93/0xb0 mm/kasan/common.c:394 kasankmalloc include/linux/kasan.h:260 [inline] _kmalloccachenoprof+0x230/0x3d0 mm/slub.c:4358 kmallocnoprof include/linux/slab.h:905 [inline] kzallocnoprof include/linux/slab.h:1039 [inline] mgmtpendingnew+0x65/0x240 net/bluetooth/mgmtutil.c:252 mgmtpendingadd+0x34/0x120 net/bluetooth/mgmtutil.c:279 removeadvmonitor+0x103/0x1b0 net/bluetooth/mgmt.c:5454 hcimgmtcmd+0x9c9/0xef0 net/bluetooth/hcisock.c:1719 hcisocksendmsg+0x6ca/0xef0 net/bluetooth/hcisock.c:1839 socksendmsgnosec net/socket.c:712 [inline] _socksendmsg+0x219/0x270 net/socket.c:727 sockwriteiter+0x258/0x330 net/socket.c:1131 newsyncwrite fs/readwrite.c:593 [inline] vfswrite+0x548/0xa90 fs/readwrite.c:686 ksyswrite+0x145/0x250 fs/readwrite.c:738 dosyscallx64 arch/x86/entry/syscall64.c:63 [inline] dosyscall64+0xfa/0x3b0 arch/x86/entry/syscall64.c:94 entrySYSCALL64after_hwframe+0x77/0x7f
Freed by task 5989: kasansavestack mm/kasan/common.c:47 [inline] kasansavetrack+0x3e/0x80 mm/kasan/common.c:68 kasansavefreeinfo+0x46/0x50 mm/kasan/generic.c:576 poisonslabobject mm/kasan/common.c:247 [inline] _kasanslabfree+0x62/0x70 mm/kasan/common.c:264 kasanslabfree include/linux/kasan.h:233 [inline] slabfreehook mm/slub.c:2380 [inline] slabfree mm/slub.c:4642 [inline] kfree+0x18e/0x440 mm/slub.c:4841 mgmtpendingforeach+0xc9/0x120 net/bluetooth/mgmtutil.c:242 mgmtindexremoved+0x10d/0x2f0 net/bluetooth/mgmt.c:9366 hcisockbind+0xbe9/0x1000 net/bluetooth/hcisock.c:1314 _sysbindsocket net/socket.c:1810 [inline] _sysbind+0x2c3/0x3e0 net/socket.c:1841 _dosysbind net/socket.c:1846 [inline] _sesysbind net/socket.c:1844 [inline] _x64sysbind+0x7a/0x90 net/socket.c:1844 dosyscallx64 arch/x86/entry/syscall64.c:63 [inline] dosyscall64+0xfa/0x3b0 arch/x86/entry/syscall64.c:94 entrySYSCALL64after_hwframe+0x77/0x7f
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"200915637587351481406729010651638354302",
"13392929591274757718899031212053368198",
"119669954401230704500388788873316869785",
"224741307125232863613257484593615652383"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "include/net/bluetooth/hci_core.h"
},
"id": "CVE-2025-38118-08d6b432"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 998.0,
"function_hash": "293059120643397480104217400968422498617"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "__add_adv_patterns_monitor"
},
"id": "CVE-2025-38118-1e0c49cb"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 916.0,
"function_hash": "30280628365772021981191995192007316981"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "remove_adv_monitor"
},
"id": "CVE-2025-38118-1f931c67"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 998.0,
"function_hash": "293059120643397480104217400968422498617"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "__add_adv_patterns_monitor"
},
"id": "CVE-2025-38118-1fa3b8de"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 317.0,
"function_hash": "254014387393597381799618705659070436997"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_sync"
},
"id": "CVE-2025-38118-21c1b583"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 317.0,
"function_hash": "254014387393597381799618705659070436997"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_sync"
},
"id": "CVE-2025-38118-30e2c3aa"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"49521588540440925332544761902023727446",
"292777141649299773930733839370036401850",
"194919423451850280430643221799473372196",
"61636188144409170872022320594136138170",
"237540689692553849874551455942671596723",
"80854905937184127302412957479336752449",
"50808982468683094743241592634728130944"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"id": "CVE-2025-38118-33b4c6cf"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 577.0,
"function_hash": "103061128008209174641635518439546182521"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_complete"
},
"id": "CVE-2025-38118-35ef14d1"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 317.0,
"function_hash": "254014387393597381799618705659070436997"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_sync"
},
"id": "CVE-2025-38118-3c86e47b"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 916.0,
"function_hash": "30280628365772021981191995192007316981"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "remove_adv_monitor"
},
"id": "CVE-2025-38118-4203a0f3"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"36204862940138520969122527984296736978",
"264685954380343202762432345197580324330",
"162680118773997502213543005929677153634",
"287549270787232888878335802164519800915",
"335600764726363692878120661119246093414",
"22435301035691149799922838275208261129",
"146329420200913340802886161114384088985",
"77944746138624263187081410939411633599",
"139255467019422225381666591988562066477",
"118125701354254930331215378955799331219",
"191607933322098199394801327150652826266",
"103109184500840555539256566165793230808",
"248213492527482592666183742648577190515",
"295622014890780678145371026713858206920",
"60009904000293379788986557815361875726",
"81738024577384360471379318256314514037",
"328292630687079728801160199816536619022",
"224656223455248620727848403507039049221",
"264447296481135777163399486605626934168",
"222245516570364869164089079117429180823",
"171732558162952092514016738494046436021",
"120922217048458061583918372793334476585",
"2275143655805392461078373657601726349",
"311680330622392236121181257293815698435",
"60769805708551961028587784438639563718",
"312748414267239785736492456039678936511",
"191741737096610448112058602514800932961",
"29229179191660697929294560670806717907",
"31052466858827379908282823444812940271",
"133928345111840378556484395362310469805",
"283481164099488130670955214345622116395",
"254150009393548528786416569637250752286",
"234471333823447139442219843292668731536",
"111473913655702995048707956051627566962",
"157648006699022467737793831393000124833",
"152529095460214808416840914399689853003",
"280495405793024276848513235209428396904",
"315947028230980283162844704905347390707",
"242756840754870174967612439164813340638",
"269464267626511785619622197876395254625",
"141247457785864688446279864856243163077",
"155298868259705895048245278474442002805",
"322119847496322433098462470522214264033",
"92683923244718247002984334514663561653",
"188073754462456998441793129683173258520",
"190288450115605794045595831416471200932",
"66980338595733014255849398338075909083",
"244002928823866264413125247712669391284",
"295191139293165596626221002103708889395",
"45230893491390015905393121578115204831",
"198601862536870473516706528975393983050",
"237094357280114547060765079506285017868",
"139845409156232959148221191479875762984",
"36028352956875356291525209830237344121"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "net/bluetooth/mgmt.c"
},
"id": "CVE-2025-38118-47c39bd9"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"36204862940138520969122527984296736978",
"264685954380343202762432345197580324330",
"162680118773997502213543005929677153634",
"287549270787232888878335802164519800915",
"335600764726363692878120661119246093414",
"22435301035691149799922838275208261129",
"146329420200913340802886161114384088985",
"77944746138624263187081410939411633599",
"139255467019422225381666591988562066477",
"118125701354254930331215378955799331219",
"191607933322098199394801327150652826266",
"103109184500840555539256566165793230808",
"248213492527482592666183742648577190515",
"295622014890780678145371026713858206920",
"60009904000293379788986557815361875726",
"81738024577384360471379318256314514037",
"328292630687079728801160199816536619022",
"224656223455248620727848403507039049221",
"264447296481135777163399486605626934168",
"222245516570364869164089079117429180823",
"171732558162952092514016738494046436021",
"120922217048458061583918372793334476585",
"2275143655805392461078373657601726349",
"311680330622392236121181257293815698435",
"60769805708551961028587784438639563718",
"312748414267239785736492456039678936511",
"191741737096610448112058602514800932961",
"29229179191660697929294560670806717907",
"31052466858827379908282823444812940271",
"133928345111840378556484395362310469805",
"283481164099488130670955214345622116395",
"254150009393548528786416569637250752286",
"234471333823447139442219843292668731536",
"111473913655702995048707956051627566962",
"157648006699022467737793831393000124833",
"152529095460214808416840914399689853003",
"280495405793024276848513235209428396904",
"315947028230980283162844704905347390707",
"242756840754870174967612439164813340638",
"269464267626511785619622197876395254625",
"141247457785864688446279864856243163077",
"155298868259705895048245278474442002805",
"322119847496322433098462470522214264033",
"92683923244718247002984334514663561653",
"188073754462456998441793129683173258520",
"190288450115605794045595831416471200932",
"66980338595733014255849398338075909083",
"244002928823866264413125247712669391284",
"295191139293165596626221002103708889395",
"45230893491390015905393121578115204831",
"198601862536870473516706528975393983050",
"237094357280114547060765079506285017868",
"139845409156232959148221191479875762984",
"36028352956875356291525209830237344121"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "net/bluetooth/mgmt.c"
},
"id": "CVE-2025-38118-565eef20"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 916.0,
"function_hash": "30280628365772021981191995192007316981"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "remove_adv_monitor"
},
"id": "CVE-2025-38118-569f7598"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"49521588540440925332544761902023727446",
"292777141649299773930733839370036401850",
"194919423451850280430643221799473372196",
"61636188144409170872022320594136138170",
"237540689692553849874551455942671596723",
"80854905937184127302412957479336752449",
"50808982468683094743241592634728130944"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"id": "CVE-2025-38118-5702bac5"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 376.0,
"function_hash": "154666413143792117066256930871397921520"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_adv_monitor_removed"
},
"id": "CVE-2025-38118-6c9f5104"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 577.0,
"function_hash": "103061128008209174641635518439546182521"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_complete"
},
"id": "CVE-2025-38118-740544f7"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"49521588540440925332544761902023727446",
"292777141649299773930733839370036401850",
"194919423451850280430643221799473372196",
"61636188144409170872022320594136138170",
"237540689692553849874551455942671596723",
"80854905937184127302412957479336752449",
"50808982468683094743241592634728130944"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"id": "CVE-2025-38118-7782056c"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 998.0,
"function_hash": "293059120643397480104217400968422498617"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "__add_adv_patterns_monitor"
},
"id": "CVE-2025-38118-7a1c5e45"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 998.0,
"function_hash": "293059120643397480104217400968422498617"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "__add_adv_patterns_monitor"
},
"id": "CVE-2025-38118-7e8aefda"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 577.0,
"function_hash": "103061128008209174641635518439546182521"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_complete"
},
"id": "CVE-2025-38118-7fa82bc2"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 376.0,
"function_hash": "154666413143792117066256930871397921520"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_adv_monitor_removed"
},
"id": "CVE-2025-38118-8124a891"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 577.0,
"function_hash": "103061128008209174641635518439546182521"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_complete"
},
"id": "CVE-2025-38118-8307903c"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 461.0,
"function_hash": "245353403886511278755394138879482768197"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_free_adv_monitor"
},
"id": "CVE-2025-38118-832b0809"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 376.0,
"function_hash": "154666413143792117066256930871397921520"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_adv_monitor_removed"
},
"id": "CVE-2025-38118-8a41775e"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 376.0,
"function_hash": "154666413143792117066256930871397921520"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_adv_monitor_removed"
},
"id": "CVE-2025-38118-9d46521d"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 461.0,
"function_hash": "245353403886511278755394138879482768197"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_free_adv_monitor"
},
"id": "CVE-2025-38118-a531ab68"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"200915637587351481406729010651638354302",
"13392929591274757718899031212053368198",
"119669954401230704500388788873316869785",
"224741307125232863613257484593615652383"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "include/net/bluetooth/hci_core.h"
},
"id": "CVE-2025-38118-a6ad6559"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 998.0,
"function_hash": "293059120643397480104217400968422498617"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "__add_adv_patterns_monitor"
},
"id": "CVE-2025-38118-acab0a5c"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 317.0,
"function_hash": "254014387393597381799618705659070436997"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_sync"
},
"id": "CVE-2025-38118-b38d0fc7"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 376.0,
"function_hash": "154666413143792117066256930871397921520"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_adv_monitor_removed"
},
"id": "CVE-2025-38118-bd765a51"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"200915637587351481406729010651638354302",
"13392929591274757718899031212053368198",
"119669954401230704500388788873316869785",
"224741307125232863613257484593615652383"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "include/net/bluetooth/hci_core.h"
},
"id": "CVE-2025-38118-c043986a"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 461.0,
"function_hash": "245353403886511278755394138879482768197"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_free_adv_monitor"
},
"id": "CVE-2025-38118-c0b33bec"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 461.0,
"function_hash": "245353403886511278755394138879482768197"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_free_adv_monitor"
},
"id": "CVE-2025-38118-c340a30f"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 461.0,
"function_hash": "245353403886511278755394138879482768197"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "net/bluetooth/hci_core.c",
"function": "hci_free_adv_monitor"
},
"id": "CVE-2025-38118-cfba222c"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 317.0,
"function_hash": "254014387393597381799618705659070436997"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_sync"
},
"id": "CVE-2025-38118-cfe1af7f"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"49521588540440925332544761902023727446",
"292777141649299773930733839370036401850",
"194919423451850280430643221799473372196",
"61636188144409170872022320594136138170",
"237540689692553849874551455942671596723",
"80854905937184127302412957479336752449",
"50808982468683094743241592634728130944"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"id": "CVE-2025-38118-e11178fe"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"49521588540440925332544761902023727446",
"292777141649299773930733839370036401850",
"194919423451850280430643221799473372196",
"61636188144409170872022320594136138170",
"237540689692553849874551455942671596723",
"80854905937184127302412957479336752449",
"50808982468683094743241592634728130944"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"id": "CVE-2025-38118-e2699216"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"200915637587351481406729010651638354302",
"13392929591274757718899031212053368198",
"119669954401230704500388788873316869785",
"224741307125232863613257484593615652383"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "include/net/bluetooth/hci_core.h"
},
"id": "CVE-2025-38118-ea175566"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"36204862940138520969122527984296736978",
"264685954380343202762432345197580324330",
"162680118773997502213543005929677153634",
"287549270787232888878335802164519800915",
"335600764726363692878120661119246093414",
"22435301035691149799922838275208261129",
"146329420200913340802886161114384088985",
"77944746138624263187081410939411633599",
"139255467019422225381666591988562066477",
"118125701354254930331215378955799331219",
"191607933322098199394801327150652826266",
"103109184500840555539256566165793230808",
"248213492527482592666183742648577190515",
"295622014890780678145371026713858206920",
"60009904000293379788986557815361875726",
"81738024577384360471379318256314514037",
"328292630687079728801160199816536619022",
"224656223455248620727848403507039049221",
"264447296481135777163399486605626934168",
"222245516570364869164089079117429180823",
"171732558162952092514016738494046436021",
"120922217048458061583918372793334476585",
"2275143655805392461078373657601726349",
"311680330622392236121181257293815698435",
"60769805708551961028587784438639563718",
"312748414267239785736492456039678936511",
"191741737096610448112058602514800932961",
"29229179191660697929294560670806717907",
"31052466858827379908282823444812940271",
"133928345111840378556484395362310469805",
"283481164099488130670955214345622116395",
"254150009393548528786416569637250752286",
"234471333823447139442219843292668731536",
"111473913655702995048707956051627566962",
"157648006699022467737793831393000124833",
"152529095460214808416840914399689853003",
"280495405793024276848513235209428396904",
"315947028230980283162844704905347390707",
"242756840754870174967612439164813340638",
"269464267626511785619622197876395254625",
"141247457785864688446279864856243163077",
"155298868259705895048245278474442002805",
"322119847496322433098462470522214264033",
"92683923244718247002984334514663561653",
"188073754462456998441793129683173258520",
"190288450115605794045595831416471200932",
"66980338595733014255849398338075909083",
"244002928823866264413125247712669391284",
"295191139293165596626221002103708889395",
"45230893491390015905393121578115204831",
"198601862536870473516706528975393983050",
"237094357280114547060765079506285017868",
"139845409156232959148221191479875762984",
"36028352956875356291525209830237344121"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "net/bluetooth/mgmt.c"
},
"id": "CVE-2025-38118-eb269516"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"200915637587351481406729010651638354302",
"13392929591274757718899031212053368198",
"119669954401230704500388788873316869785",
"224741307125232863613257484593615652383"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32aa2fbe319f33b0318ec6f4fceb63879771a286",
"target": {
"file": "include/net/bluetooth/hci_core.h"
},
"id": "CVE-2025-38118-ed3bcaea"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 577.0,
"function_hash": "103061128008209174641635518439546182521"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f66b6531c2b4e996bb61720ee94adb4b2e8d1be",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_remove_adv_monitor_complete"
},
"id": "CVE-2025-38118-f4c9d2c5"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 916.0,
"function_hash": "30280628365772021981191995192007316981"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9df3e5e7f7e4653fd9802878cedc36defc5ef42d",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "remove_adv_monitor"
},
"id": "CVE-2025-38118-f64a7a83"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 916.0,
"function_hash": "30280628365772021981191995192007316981"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "remove_adv_monitor"
},
"id": "CVE-2025-38118-fabae0b0"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"36204862940138520969122527984296736978",
"264685954380343202762432345197580324330",
"162680118773997502213543005929677153634",
"287549270787232888878335802164519800915",
"335600764726363692878120661119246093414",
"22435301035691149799922838275208261129",
"146329420200913340802886161114384088985",
"77944746138624263187081410939411633599",
"139255467019422225381666591988562066477",
"118125701354254930331215378955799331219",
"191607933322098199394801327150652826266",
"103109184500840555539256566165793230808",
"248213492527482592666183742648577190515",
"295622014890780678145371026713858206920",
"60009904000293379788986557815361875726",
"81738024577384360471379318256314514037",
"328292630687079728801160199816536619022",
"224656223455248620727848403507039049221",
"264447296481135777163399486605626934168",
"222245516570364869164089079117429180823",
"171732558162952092514016738494046436021",
"120922217048458061583918372793334476585",
"2275143655805392461078373657601726349",
"311680330622392236121181257293815698435",
"60769805708551961028587784438639563718",
"312748414267239785736492456039678936511",
"191741737096610448112058602514800932961",
"29229179191660697929294560670806717907",
"31052466858827379908282823444812940271",
"133928345111840378556484395362310469805",
"283481164099488130670955214345622116395",
"254150009393548528786416569637250752286",
"234471333823447139442219843292668731536",
"111473913655702995048707956051627566962",
"157648006699022467737793831393000124833",
"152529095460214808416840914399689853003",
"280495405793024276848513235209428396904",
"315947028230980283162844704905347390707",
"242756840754870174967612439164813340638",
"269464267626511785619622197876395254625",
"141247457785864688446279864856243163077",
"155298868259705895048245278474442002805",
"322119847496322433098462470522214264033",
"92683923244718247002984334514663561653",
"188073754462456998441793129683173258520",
"190288450115605794045595831416471200932",
"66980338595733014255849398338075909083",
"244002928823866264413125247712669391284",
"295191139293165596626221002103708889395",
"45230893491390015905393121578115204831",
"198601862536870473516706528975393983050",
"237094357280114547060765079506285017868",
"139845409156232959148221191479875762984",
"36028352956875356291525209830237344121"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c",
"target": {
"file": "net/bluetooth/mgmt.c"
},
"id": "CVE-2025-38118-fceec171"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"36204862940138520969122527984296736978",
"264685954380343202762432345197580324330",
"162680118773997502213543005929677153634",
"287549270787232888878335802164519800915",
"335600764726363692878120661119246093414",
"22435301035691149799922838275208261129",
"146329420200913340802886161114384088985",
"77944746138624263187081410939411633599",
"139255467019422225381666591988562066477",
"118125701354254930331215378955799331219",
"191607933322098199394801327150652826266",
"103109184500840555539256566165793230808",
"248213492527482592666183742648577190515",
"295622014890780678145371026713858206920",
"60009904000293379788986557815361875726",
"81738024577384360471379318256314514037",
"328292630687079728801160199816536619022",
"224656223455248620727848403507039049221",
"264447296481135777163399486605626934168",
"222245516570364869164089079117429180823",
"171732558162952092514016738494046436021",
"120922217048458061583918372793334476585",
"2275143655805392461078373657601726349",
"311680330622392236121181257293815698435",
"60769805708551961028587784438639563718",
"312748414267239785736492456039678936511",
"191741737096610448112058602514800932961",
"29229179191660697929294560670806717907",
"31052466858827379908282823444812940271",
"133928345111840378556484395362310469805",
"283481164099488130670955214345622116395",
"254150009393548528786416569637250752286",
"234471333823447139442219843292668731536",
"111473913655702995048707956051627566962",
"157648006699022467737793831393000124833",
"152529095460214808416840914399689853003",
"280495405793024276848513235209428396904",
"315947028230980283162844704905347390707",
"242756840754870174967612439164813340638",
"269464267626511785619622197876395254625",
"141247457785864688446279864856243163077",
"155298868259705895048245278474442002805",
"322119847496322433098462470522214264033",
"92683923244718247002984334514663561653",
"188073754462456998441793129683173258520",
"190288450115605794045595831416471200932",
"66980338595733014255849398338075909083",
"244002928823866264413125247712669391284",
"295191139293165596626221002103708889395",
"45230893491390015905393121578115204831",
"198601862536870473516706528975393983050",
"237094357280114547060765079506285017868",
"139845409156232959148221191479875762984",
"36028352956875356291525209830237344121"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c9aba9cbdf163e2654be9f82d43ff8a04273962",
"target": {
"file": "net/bluetooth/mgmt.c"
},
"id": "CVE-2025-38118-fe0e0699"
}
]