In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: Fix possible UAFs
This attemps to fix possible UAFs caused by struct mgmtpending being freed while still being processed like in the following trace, in order to fix mgmtpendingvalid is introduce and use to check if the mgmtpending hasn't been removed from the pending list, on the complete callbacks it is used to check and in addtion remove the cmd from the list while holding mgmtpendinglock to avoid TOCTOU problems since if the cmd is left on the list it can still be accessed and freed.
BUG: KASAN: slab-use-after-free in mgmtaddadvpatternsmonitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55
CPU: 0 UID: 0 PID: 55 Comm: kworker/u11:0 Not tainted 6.16.4 #2 PREEMPT(full) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014 Workqueue: hci0 hcicmdsyncwork Call Trace: <TASK> dumpstacklvl+0x189/0x250 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:378 [inline] printreport+0xca/0x240 mm/kasan/report.c:482 kasanreport+0x118/0x150 mm/kasan/report.c:595 mgmtaddadvpatternsmonitorsync+0x35/0x50 net/bluetooth/mgmt.c:5223 hcicmdsyncwork+0x210/0x3a0 net/bluetooth/hcisync.c:332 processonework kernel/workqueue.c:3238 [inline] processscheduledworks+0xade/0x17b0 kernel/workqueue.c:3321 workerthread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x711/0x8a0 kernel/kthread.c:464 retfromfork+0x3fc/0x770 arch/x86/kernel/process.c:148 retfromforkasm+0x1a/0x30 home/kwqcheii/source/fuzzing/kernel/kasan/linux-6.16.4/arch/x86/entry/entry64.S:245 </TASK>
Allocated by task 12210: kasansavestack mm/kasan/common.c:47 [inline] kasansavetrack+0x3e/0x80 mm/kasan/common.c:68 poisonkmallocredzone mm/kasan/common.c:377 [inline] _kasankmalloc+0x93/0xb0 mm/kasan/common.c:394 kasankmalloc include/linux/kasan.h:260 [inline] _kmalloccachenoprof+0x230/0x3d0 mm/slub.c:4364 kmallocnoprof include/linux/slab.h:905 [inline] kzallocnoprof include/linux/slab.h:1039 [inline] mgmtpendingnew+0x65/0x1e0 net/bluetooth/mgmtutil.c:269 mgmtpendingadd+0x35/0x140 net/bluetooth/mgmtutil.c:296 _addadvpatternsmonitor+0x130/0x200 net/bluetooth/mgmt.c:5247 addadvpatternsmonitor+0x214/0x360 net/bluetooth/mgmt.c:5364 hcimgmtcmd+0x9c9/0xef0 net/bluetooth/hcisock.c:1719 hcisocksendmsg+0x6ca/0xef0 net/bluetooth/hcisock.c:1839 socksendmsgnosec net/socket.c:714 [inline] _socksendmsg+0x219/0x270 net/socket.c:729 sockwriteiter+0x258/0x330 net/socket.c:1133 newsyncwrite fs/readwrite.c:593 [inline] vfswrite+0x5c9/0xb30 fs/readwrite.c:686 ksyswrite+0x145/0x250 fs/readwrite.c:738 dosyscallx64 arch/x86/entry/syscall64.c:63 [inline] dosyscall64+0xfa/0x3b0 arch/x86/entry/syscall64.c:94 entrySYSCALL64afterhwframe+0x77/0x7f
Freed by task 12221: kasansavestack mm/kasan/common.c:47 [inline] kasansavetrack+0x3e/0x80 mm/kasan/common.c:68 kasansavefreeinfo+0x46/0x50 mm/kasan/generic.c:576 poisonslabobject mm/kasan/common.c:247 [inline] _kasanslabfree+0x62/0x70 mm/kasan/common.c:264 kasanslabfree include/linux/kasan.h:233 [inline] slabfreehook mm/slub.c:2381 [inline] slabfree mm/slub.c:4648 [inline] kfree+0x18e/0x440 mm/slub.c:4847 mgmtpendingfree net/bluetooth/mgmtutil.c:311 [inline] mgmtpendingforeach+0x30d/0x380 net/bluetooth/mgmtutil.c:257 _mgmtpoweroff+0x169/0x350 net/bluetooth/mgmt.c:9444 hcidevclosesync+0x754/0x1330 net/bluetooth/hcisync.c:5290 hcidevdoclose net/bluetooth/hcicore.c:501 [inline] hcidevclose+0x108/0x200 net/bluetooth/hcicore.c:526 sockdoioctl+0xd9/0x300 net/socket.c:1192 sockioctl+0x576/0x790 net/socket.c:1313 vfsioctl fs/ioctl.c:51 [inline] _dosysioctl fs/ioctl.c:907 [inline] _sesysioctl+0xf9/0x170 fs/ioctl.c:893 dosyscallx64 arch/x86/entry/syscall64.c:63 [inline] dosyscall64+0xf ---truncated---
[
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"224499324273338921156847477107634705869",
"57771292403108687969484184749928022407",
"110660742213125560422585198804338687394"
],
"threshold": 0.9
},
"target": {
"file": "net/bluetooth/mgmt_util.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-05822aa8"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 517.0,
"function_hash": "324982581803188258154618556246578008412"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_set_connectable_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-0673e6f7"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"224499324273338921156847477107634705869",
"57771292403108687969484184749928022407",
"110660742213125560422585198804338687394"
],
"threshold": 0.9
},
"target": {
"file": "net/bluetooth/mgmt_util.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-0d9ba9c2"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 778.0,
"function_hash": "332766506460705499142737732217758011894"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_ssp_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-0f1f936a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 766.0,
"function_hash": "310200004044050937890023895403444083358"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_set_discoverable_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-157fb357"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 528.0,
"function_hash": "56674141368202128482642127987113783060"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_adv_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-1586c631"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"105594953570048490840655586992310473013",
"60809653833510639551307081027168880859",
"301717392632171753561606584027388786651",
"226078275289481025650615244365387846753"
],
"threshold": 0.9
},
"target": {
"file": "net/bluetooth/mgmt_util.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-15ef9c0b"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 689.0,
"function_hash": "213633339385095177345297119129004446086"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_le_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-1b4a816a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 123.0,
"function_hash": "120428134917447791390314402222083399937"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_connectable_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-25e4b0d6"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 148.0,
"function_hash": "204506899711845167125558224546881547212"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_add_adv_patterns_monitor_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-267c4c7e"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 689.0,
"function_hash": "213633339385095177345297119129004446086"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_le_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-418de6fd"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 269.0,
"function_hash": "197828092000675103267758170616272624401"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_powered_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-4609bd07"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 556.0,
"function_hash": "339006667240586299132088730788354295467"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "start_discovery_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-4970bea6"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 269.0,
"function_hash": "197828092000675103267758170616272624401"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_powered_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-4e3fbb05"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 589.0,
"function_hash": "244388657117429740627441756323890655283"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_mesh_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-5d3b8504"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 123.0,
"function_hash": "120428134917447791390314402222083399937"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_discoverable_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-5db63fb0"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 674.0,
"function_hash": "166439769789179827190301784498432824767"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_add_adv_patterns_monitor_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-61184147"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 123.0,
"function_hash": "120428134917447791390314402222083399937"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_discoverable_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-61ae5f97"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 766.0,
"function_hash": "310200004044050937890023895403444083358"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_set_discoverable_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-679b4f98"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 866.0,
"function_hash": "25927943790872505391077794399894309551"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_default_phy_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-713f42ff"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 517.0,
"function_hash": "324982581803188258154618556246578008412"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_set_connectable_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-7738f9a1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"135742070829006228375790423096491022659",
"273825483106569507987497964415637296461",
"23959989704226658299975768457038137215",
"35494966095573806489813000210865518928",
"4872618248577484943661861266316938751",
"114746495139026259030216351360770449561",
"131954733781387420864384311503575814041",
"207668718023947024557037642354237089023",
"174527931456207131259793850740918353957",
"109714576172201457115319353674744776018",
"29137902675620265108576392897906924119",
"341678690309851767163700993006209542",
"138448494651715620845014577062493338192",
"200181926787487095415821291073398558950",
"236169527154888919385430862899252162510",
"203044088704478675304596574110431972500",
"129381591258562044449332457532493863105",
"184669323611380809663329633826591111406",
"166483824212658957929410157066852195942",
"124409254357210527061937554951957969049",
"44686575785560399350653429826545401374",
"145163468757493376859227004395088901755",
"316437126041428218443920487329583930405",
"310192469871242668521930699708274799393",
"36546720184194606777166444413128300341",
"119794192381871179296371650699884904151",
"202529190491120748781795087079710342794",
"173208534651286908454957698820688506202",
"97197080892816446649581664352323575255",
"2205205102623583374053716472971829328",
"128436267439856817108405198457222024252",
"237255547061740676728388956390241648909",
"124409254357210527061937554951957969049",
"220034275779054837483116397271004365938",
"106255053182248102936642925141183989809",
"224166843058716641812560563938977031274",
"70107959757719639982135819847402507782",
"85113682273678351910815271354132091128",
"119794192381871179296371650699884904151",
"202529190491120748781795087079710342794",
"73824236183932535438857540969331971565",
"326085860688836014939370986145993482355",
"132015437835582125295599348555548250892",
"231070362480570712570533827998192956757",
"65333617676980570598285964567460127172",
"63920648282064356679099409475894475665",
"279081003979926126962125181963031386639",
"119945495942882598179864517786971044073",
"123291022597269708438687932859043528108",
"180488492299579845731639888839302867385",
"292301062092970956216333371904083680229",
"269574888410300213755987964545479798964",
"221833792888023504910717160263574827087",
"17205265878322793013190766937952578549",
"74544309444014448735150287914856496127",
"14831278742769700162364209091718855535",
"86978208276251652412743885915054922389",
"200314975480022700780994816707660330265",
"145185809867103324719070506052977581469",
"248099344445578787057915853106303867101",
"20631439660702534721329551534680948909",
"149158740761636763178737923481807868481",
"174266088157909854414191594300124128299",
"140625615814051058709360203857977411144",
"4537935268260811239918555395888213925",
"253418763149988970681600297371708193918",
"230245726273487515988582200593843474267",
"2534043951037618069510812027588172508",
"7160788247181556504850761176422134614",
"224193433591460460743484054315441315528",
"125419558361824624458076103502199654753",
"79472154635294490744957330109764314179",
"331979359677035287856346921704375942317",
"251356931259690999419764850683361468164",
"110330140880424856428635187842355991978",
"203593245140961725947156809215360524734",
"246646696074994649746273281679229666995",
"185001262456834144277780919154933890291",
"196879110806387683403057320504550453850",
"264307580978576736756084992358703583157",
"239192711920697707529155931817357769281",
"286530531962936650902270364985857028012",
"326977567516847396760416503829495713923",
"306843080072438954857685902660532555590",
"181767963019836722116330991774627649843",
"135464752829040983165026786287466240382",
"309577941628469998267891283379270466670",
"239106815670118623009554317408820933939",
"307080303232623610608805099830904850527",
"121371135647584731789626711904128361330",
"149123525021945638187770688316447083108",
"329879280174562305540928053904368137587",
"226218589877947053560745974703512099076",
"167933687239655221966348712533204274604",
"115238662118493343725368683605808205063",
"19134916086879852445437165631541826213",
"85817312025553488934288759288648929137",
"203135597875692059815049960033152141518",
"262546867340152464486403702451515669938",
"152565473472555486531674394085527883644",
"271931735552739596779052774008555273314",
"320607299793671363054332447870151040885",
"218816534246184401149534347684359845531",
"64799028703293792743924163112042919956",
"104593457644247934713397319609172014636",
"94286406512615690060128016034093933394",
"296000505706602522028338742226140189277",
"329738203186386187423066647763221284783",
"254685858595600205686743999684936003478",
"233766881475475955626410884985995863990",
"197655334788533903016462717758673422347",
"119174622190462265096179452123751319983",
"22600606281960461276784410925054742330",
"58735431105378317082474759352578965954",
"146475955631635271469852419869751925650",
"313832456342119283498810248834746609653",
"217888224769593493091798751419858619517",
"79367473239277948611459449751592743351",
"179225284614503655292023003538944081415",
"137094619472250244082257871448334995365",
"154695912495883760771977939206449178",
"295897024217113699408566282948820807561",
"135659128814635964667587985127443373682",
"284584117520088942527897312420477194858",
"144835982438498847683750893343898529468",
"175342358828228462810460225799196366761",
"303084024259151954753124613448895687300",
"42911319563908616578265590644286635344",
"7041949049388839207968052250322085559",
"175859057701722221222738885083148343528",
"218058530872392594030972062044376960405",
"37792335144217042793033026010289477556",
"66812366858503775566651354573205884219",
"44728435452822064507892088599974027100",
"140626280097398180136436335925745086562",
"11063529064851789398987114011898106029",
"9396497849841188384000713957746306122",
"321906183328375119841530571876701805924",
"233953002828976229919351873209790310306",
"10883744286206365889397442821959744178",
"60036246322818411973960720741583547419",
"82429715617915638981052067501127159807",
"226894206240561692672979083336372682782",
"65289405169552966242826410429928482862",
"283894337283668824964228817656817078786",
"120631619511248020840616500899326441920",
"47704116703849903197962565795529031985",
"1248160230902323264648468778828622535",
"65633476815312904660562081651066664413",
"79273890513616554629568190542783384756",
"301820264446156827854928936128353119475",
"97048051759778453070991391899340280929",
"269368560899815205671009099623865781393",
"269961953486309396590527725389759161888",
"264520050475734843812424795129871496733",
"55535463090963109385430822473253033215",
"84996694894042708699921887107667946871",
"1992730637444117074710276108101693873",
"298474597465410683812689200114630637680",
"310868909881059341675555967102268316930",
"70132318807409455716579819855398525353",
"22667588185026434874862972968484518482",
"102031515475779113437875653787353242695",
"46534373386942692438426251166213912678",
"331439389973215756672357148175364498556",
"178320742068015405208982808642458113143",
"151136270079964594290973493804499774723",
"261241776088940134875812899225788540281",
"151832925558403925882302972660245206854",
"127615305717966752565229776835006914919",
"262543695076124339065313790398349408952",
"168814896907742935857879328873160491930",
"65312439968964687470138099982855574243",
"31668959001905073664894477699678335217",
"297519290790247573391044786357729179363",
"66716774781446634752754341648233974605",
"242900403068638550431372015481182997307",
"85169003657146324352587203639081966300",
"130616412857417831901360196001229614269",
"10134861390170993775941637942207174182",
"186231492900007845015059411239713416700",
"301591609856991841458539079149230827154",
"120448918411872962607971883807282937052",
"43946572578345813595916312453868422476",
"41697737204112524233284297530153192131",
"193818943524236503355623812203116469803",
"155427615286039323192587306015156114130",
"284773225180298148014972537041461431127",
"287876790656626495232183166564887238283",
"155859083164790350122218061664591143213",
"19178451251961841751455976440035640108",
"304998805894747008704501173607650329807",
"268209945913224587958833446218539779698",
"74307296530850005790808162034372998650",
"161642814506652075579539359356455183216",
"223228966652711378588984814291950046018",
"334490648366854882890551395225573668830",
"31732595254291762998573256378066668218",
"66550432416140248715611314581093896467",
"133988586144672442049721850972755926059",
"63614807167786773853137227787715420244",
"43698661459642296792877871326480104290",
"156108970003100155230035002309903610889",
"259555968840477553668914584036305264838",
"10946188731222719680871370267490186067",
"281097467326411914873201958101925644593",
"63106895558001865913287236953419762022",
"69470712970628460007037153596447735829",
"254285280931229538459916709990756225308",
"103145928813247780814301737865816649389",
"117343220642165363880960548976465253362",
"83661815821201631436708904238231744710",
"141598507211887300448996804042753540398",
"280165075380939023453403472427293923893",
"263989648920377296983090601365044120271",
"23431395039735122252370750193460257626",
"161520702252870619673655440407445713737",
"121371135647584731789626711904128361330",
"107708380522045279345760304000385785253",
"81047668439463376749322732401179082609",
"21652228183714636021717525357446286798",
"34559150893027458441487220557810688016",
"211204632671120500056832316665503580277",
"90290114740174417328290308869207967546",
"64497375390050044994454544502708781323",
"315728041901358664517847036903411954289",
"29439442235072696534704605625254768928",
"60036246322818411973960720741583547419",
"155933955746767299112598605925400756195",
"170641719494214085638304008277219690646",
"134751055203118467129819433877652583348",
"103841609183655045750103068402141170589",
"315322461377410493251597572736576763620",
"221399044641600213584427967389659858082",
"336094497471758883416204587094972446557",
"113214053121128364175533313719710291321"
],
"threshold": 0.9
},
"target": {
"file": "net/bluetooth/mgmt.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-7b462e2c"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 528.0,
"function_hash": "56674141368202128482642127987113783060"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_adv_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-83721dd0"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 355.0,
"function_hash": "125518986385873012955775572145869250504"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_mesh_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-85300a99"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2371.0,
"function_hash": "144754855509755953145330642673668631375"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "read_local_oob_ext_data_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-8722c19e"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 556.0,
"function_hash": "339006667240586299132088730788354295467"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "start_discovery_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-8857b141"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 866.0,
"function_hash": "25927943790872505391077794399894309551"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_default_phy_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-8b297ba3"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"105594953570048490840655586992310473013",
"60809653833510639551307081027168880859",
"301717392632171753561606584027388786651",
"226078275289481025650615244365387846753"
],
"threshold": 0.9
},
"target": {
"file": "net/bluetooth/mgmt_util.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-8effe0d5"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 319.0,
"function_hash": "310640551959025488759186777469448731523"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_ssp_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-9ed61f3f"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 754.0,
"function_hash": "264833241567138489352548885903896971388"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_default_phy_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-a96a783f"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 403.0,
"function_hash": "59863626806610149591678292302079429648"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "stop_discovery_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-b5ec5b52"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 871.0,
"function_hash": "321587566255541748057604736723991438866"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_advertising_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-b6140416"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 674.0,
"function_hash": "166439769789179827190301784498432824767"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_add_adv_patterns_monitor_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-b6765363"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 588.0,
"function_hash": "166129802776890939581229229878779494138"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_name_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-bbcf0e36"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 754.0,
"function_hash": "264833241567138489352548885903896971388"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_default_phy_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-bbe97e06"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2371.0,
"function_hash": "144754855509755953145330642673668631375"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "read_local_oob_ext_data_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-bf511d24"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 593.0,
"function_hash": "56590315030540633216504826569792301978"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_set_powered_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-c20da140"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 319.0,
"function_hash": "310640551959025488759186777469448731523"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_ssp_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-c7447222"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 588.0,
"function_hash": "166129802776890939581229229878779494138"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_name_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-c82a4c5f"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 411.0,
"function_hash": "219694004815107061498119476334999862337"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_le_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-c9fba8cf"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 123.0,
"function_hash": "120428134917447791390314402222083399937"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_connectable_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-cae50564"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 593.0,
"function_hash": "56590315030540633216504826569792301978"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_set_powered_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-d084961d"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 411.0,
"function_hash": "219694004815107061498119476334999862337"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_le_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-d20cfba4"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 355.0,
"function_hash": "125518986385873012955775572145869250504"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_mesh_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-dc94ae72"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"135742070829006228375790423096491022659",
"273825483106569507987497964415637296461",
"23959989704226658299975768457038137215",
"35494966095573806489813000210865518928",
"4872618248577484943661861266316938751",
"114746495139026259030216351360770449561",
"131954733781387420864384311503575814041",
"207668718023947024557037642354237089023",
"174527931456207131259793850740918353957",
"109714576172201457115319353674744776018",
"29137902675620265108576392897906924119",
"341678690309851767163700993006209542",
"138448494651715620845014577062493338192",
"200181926787487095415821291073398558950",
"236169527154888919385430862899252162510",
"203044088704478675304596574110431972500",
"129381591258562044449332457532493863105",
"184669323611380809663329633826591111406",
"166483824212658957929410157066852195942",
"124409254357210527061937554951957969049",
"44686575785560399350653429826545401374",
"145163468757493376859227004395088901755",
"316437126041428218443920487329583930405",
"310192469871242668521930699708274799393",
"36546720184194606777166444413128300341",
"119794192381871179296371650699884904151",
"202529190491120748781795087079710342794",
"173208534651286908454957698820688506202",
"97197080892816446649581664352323575255",
"2205205102623583374053716472971829328",
"128436267439856817108405198457222024252",
"237255547061740676728388956390241648909",
"124409254357210527061937554951957969049",
"220034275779054837483116397271004365938",
"106255053182248102936642925141183989809",
"224166843058716641812560563938977031274",
"70107959757719639982135819847402507782",
"85113682273678351910815271354132091128",
"119794192381871179296371650699884904151",
"202529190491120748781795087079710342794",
"73824236183932535438857540969331971565",
"326085860688836014939370986145993482355",
"132015437835582125295599348555548250892",
"231070362480570712570533827998192956757",
"65333617676980570598285964567460127172",
"63920648282064356679099409475894475665",
"279081003979926126962125181963031386639",
"119945495942882598179864517786971044073",
"123291022597269708438687932859043528108",
"180488492299579845731639888839302867385",
"292301062092970956216333371904083680229",
"269574888410300213755987964545479798964",
"221833792888023504910717160263574827087",
"17205265878322793013190766937952578549",
"74544309444014448735150287914856496127",
"14831278742769700162364209091718855535",
"86978208276251652412743885915054922389",
"200314975480022700780994816707660330265",
"145185809867103324719070506052977581469",
"248099344445578787057915853106303867101",
"20631439660702534721329551534680948909",
"149158740761636763178737923481807868481",
"174266088157909854414191594300124128299",
"140625615814051058709360203857977411144",
"4537935268260811239918555395888213925",
"253418763149988970681600297371708193918",
"230245726273487515988582200593843474267",
"2534043951037618069510812027588172508",
"7160788247181556504850761176422134614",
"224193433591460460743484054315441315528",
"125419558361824624458076103502199654753",
"79472154635294490744957330109764314179",
"331979359677035287856346921704375942317",
"251356931259690999419764850683361468164",
"110330140880424856428635187842355991978",
"203593245140961725947156809215360524734",
"246646696074994649746273281679229666995",
"185001262456834144277780919154933890291",
"196879110806387683403057320504550453850",
"264307580978576736756084992358703583157",
"239192711920697707529155931817357769281",
"286530531962936650902270364985857028012",
"326977567516847396760416503829495713923",
"306843080072438954857685902660532555590",
"181767963019836722116330991774627649843",
"135464752829040983165026786287466240382",
"309577941628469998267891283379270466670",
"239106815670118623009554317408820933939",
"307080303232623610608805099830904850527",
"121371135647584731789626711904128361330",
"149123525021945638187770688316447083108",
"329879280174562305540928053904368137587",
"226218589877947053560745974703512099076",
"167933687239655221966348712533204274604",
"115238662118493343725368683605808205063",
"19134916086879852445437165631541826213",
"85817312025553488934288759288648929137",
"203135597875692059815049960033152141518",
"262546867340152464486403702451515669938",
"152565473472555486531674394085527883644",
"271931735552739596779052774008555273314",
"320607299793671363054332447870151040885",
"218816534246184401149534347684359845531",
"64799028703293792743924163112042919956",
"104593457644247934713397319609172014636",
"94286406512615690060128016034093933394",
"296000505706602522028338742226140189277",
"329738203186386187423066647763221284783",
"254685858595600205686743999684936003478",
"233766881475475955626410884985995863990",
"197655334788533903016462717758673422347",
"119174622190462265096179452123751319983",
"22600606281960461276784410925054742330",
"58735431105378317082474759352578965954",
"146475955631635271469852419869751925650",
"313832456342119283498810248834746609653",
"217888224769593493091798751419858619517",
"79367473239277948611459449751592743351",
"179225284614503655292023003538944081415",
"137094619472250244082257871448334995365",
"154695912495883760771977939206449178",
"295897024217113699408566282948820807561",
"135659128814635964667587985127443373682",
"284584117520088942527897312420477194858",
"144835982438498847683750893343898529468",
"175342358828228462810460225799196366761",
"303084024259151954753124613448895687300",
"42911319563908616578265590644286635344",
"7041949049388839207968052250322085559",
"175859057701722221222738885083148343528",
"218058530872392594030972062044376960405",
"37792335144217042793033026010289477556",
"66812366858503775566651354573205884219",
"44728435452822064507892088599974027100",
"140626280097398180136436335925745086562",
"11063529064851789398987114011898106029",
"9396497849841188384000713957746306122",
"321906183328375119841530571876701805924",
"233953002828976229919351873209790310306",
"10883744286206365889397442821959744178",
"60036246322818411973960720741583547419",
"82429715617915638981052067501127159807",
"226894206240561692672979083336372682782",
"65289405169552966242826410429928482862",
"283894337283668824964228817656817078786",
"120631619511248020840616500899326441920",
"47704116703849903197962565795529031985",
"1248160230902323264648468778828622535",
"65633476815312904660562081651066664413",
"79273890513616554629568190542783384756",
"301820264446156827854928936128353119475",
"97048051759778453070991391899340280929",
"269368560899815205671009099623865781393",
"269961953486309396590527725389759161888",
"264520050475734843812424795129871496733",
"55535463090963109385430822473253033215",
"84996694894042708699921887107667946871",
"1992730637444117074710276108101693873",
"298474597465410683812689200114630637680",
"310868909881059341675555967102268316930",
"70132318807409455716579819855398525353",
"22667588185026434874862972968484518482",
"102031515475779113437875653787353242695",
"46534373386942692438426251166213912678",
"331439389973215756672357148175364498556",
"178320742068015405208982808642458113143",
"151136270079964594290973493804499774723",
"261241776088940134875812899225788540281",
"151832925558403925882302972660245206854",
"127615305717966752565229776835006914919",
"262543695076124339065313790398349408952",
"168814896907742935857879328873160491930",
"65312439968964687470138099982855574243",
"31668959001905073664894477699678335217",
"297519290790247573391044786357729179363",
"66716774781446634752754341648233974605",
"242900403068638550431372015481182997307",
"85169003657146324352587203639081966300",
"130616412857417831901360196001229614269",
"10134861390170993775941637942207174182",
"186231492900007845015059411239713416700",
"301591609856991841458539079149230827154",
"120448918411872962607971883807282937052",
"43946572578345813595916312453868422476",
"41697737204112524233284297530153192131",
"193818943524236503355623812203116469803",
"155427615286039323192587306015156114130",
"284773225180298148014972537041461431127",
"287876790656626495232183166564887238283",
"155859083164790350122218061664591143213",
"19178451251961841751455976440035640108",
"304998805894747008704501173607650329807",
"268209945913224587958833446218539779698",
"74307296530850005790808162034372998650",
"161642814506652075579539359356455183216",
"223228966652711378588984814291950046018",
"334490648366854882890551395225573668830",
"31732595254291762998573256378066668218",
"66550432416140248715611314581093896467",
"133988586144672442049721850972755926059",
"63614807167786773853137227787715420244",
"43698661459642296792877871326480104290",
"156108970003100155230035002309903610889",
"259555968840477553668914584036305264838",
"10946188731222719680871370267490186067",
"281097467326411914873201958101925644593",
"63106895558001865913287236953419762022",
"69470712970628460007037153596447735829",
"254285280931229538459916709990756225308",
"103145928813247780814301737865816649389",
"117343220642165363880960548976465253362",
"83661815821201631436708904238231744710",
"141598507211887300448996804042753540398",
"280165075380939023453403472427293923893",
"263989648920377296983090601365044120271",
"23431395039735122252370750193460257626",
"161520702252870619673655440407445713737",
"121371135647584731789626711904128361330",
"107708380522045279345760304000385785253",
"81047668439463376749322732401179082609",
"21652228183714636021717525357446286798",
"34559150893027458441487220557810688016",
"211204632671120500056832316665503580277",
"90290114740174417328290308869207967546",
"64497375390050044994454544502708781323",
"315728041901358664517847036903411954289",
"29439442235072696534704605625254768928",
"60036246322818411973960720741583547419",
"155933955746767299112598605925400756195",
"170641719494214085638304008277219690646",
"134751055203118467129819433877652583348",
"103841609183655045750103068402141170589",
"315322461377410493251597572736576763620",
"221399044641600213584427967389659858082",
"336094497471758883416204587094972446557",
"113214053121128364175533313719710291321"
],
"threshold": 0.9
},
"target": {
"file": "net/bluetooth/mgmt.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-e5e42b56"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 778.0,
"function_hash": "332766506460705499142737732217758011894"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_ssp_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-eae3f876"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 403.0,
"function_hash": "59863626806610149591678292302079429648"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "stop_discovery_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-f36ee1b8"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 871.0,
"function_hash": "321587566255541748057604736723991438866"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_advertising_complete"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-f3d2d9c2"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "17305791482932021392710112602907561551"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_name_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-f50b275f"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 589.0,
"function_hash": "244388657117429740627441756323890655283"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_mesh_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a1f16f07c6c43771754075e08f45b41d237421",
"signature_version": "v1",
"id": "CVE-2025-39981-f809c5f8"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 148.0,
"function_hash": "204506899711845167125558224546881547212"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "mgmt_add_adv_patterns_monitor_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-fce80713"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "17305791482932021392710112602907561551"
},
"target": {
"file": "net/bluetooth/mgmt.c",
"function": "set_name_sync"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@302a1f674c00dd5581ab8e493ef44767c5101aab",
"signature_version": "v1",
"id": "CVE-2025-39981-ffe44797"
}
]