CVE-2025-40301
Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2025-12-08

Last updated on: 2025-12-08

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate skb length for unknown CC opcode In hci_cmd_complete_evt(), if the command complete event has an unknown opcode, we assume the first byte of the remaining skb->data contains the return status. However, parameter data has previously been pulled in hci_event_func(), which may leave the skb empty. If so, using skb->data[0] for the return status uses un-init memory. The fix is to check skb->len before using skb->data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-08
Last Modified
2025-12-08
Generated
2026-07-06
AI Q&A
2025-12-08
EPSS Evaluated
2026-07-05
NVD
CVE-2025-40301
EUVD
EUVD-2025-201644

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel's Bluetooth subsystem occurs in the handling of command complete events with unknown opcodes. Specifically, the code assumes that the first byte of the remaining skb->data contains the return status. However, because parameter data may have already been pulled earlier, the skb could be empty, leading to the use of uninitialized memory when accessing skb->data[0]. The fix involves checking the length of skb before accessing its data to prevent this issue.

Impact Analysis

The vulnerability can lead to the use of uninitialized memory when processing Bluetooth command complete events with unknown opcodes. This could potentially cause unpredictable behavior, crashes, or security issues such as information leakage or system instability in affected Linux systems.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-40301. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart