Log in Start free

Vulnerability · Published Jan 13, 2026 · Assigned by Linux

CVE-2025-71082Bluetooth: btusb: revert use of devm_kzalloc in btusb

High 7.8

In plain English

A high-severity use-after-free in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921dbd00c4e ("Bluetooth: Use devm_kzalloc in btusb.c file"). In btusb_probe(), we use devm_kzalloc() to allocate the btusb data. This ties the lifetime of all the btusb data to the binding of a driver to one interface, INTF. In a driver that binds to other interfaces, ISOC and DIAG, this is an accident waiting to happen. The issue is revealed in btusb_disconnect(), where calling usb_driver_release_interface(&btusb_driver, data->intf) will have devm free the data that is also being used by the other interfaces of the driver that may not be released yet. To fix this, revert the use of devm and go back to freeing memory explicitly.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-abi-stablelists4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-core4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-cross-headers4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-debug4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-debug-core4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-debug-devel4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-debug-modules4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-devel4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-doc4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-headers4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-modules4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-modules-extra4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-rt4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-core4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-debug4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-debug-core4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-devel4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-modules4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.166.1.rt7.507.el8_10ALSA-2026:70403
AlmaLinux:8kernel-tools4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-tools-libs4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-zfcpdump4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8perf4.18.0-553.166.1.el8_10ALSA-2026:70402
AlmaLinux:8python3-perf4.18.0-553.166.1.el8_10ALSA-2026:70402
Debian:12linux6.1.162-1DEBIAN-CVE-2025-71082
Debian:13linux6.12.69-1DEBIAN-CVE-2025-71082
Debian:14linux6.18.5-1DEBIAN-CVE-2025-71082
Rocky Linux:8kernel0:4.18.0-553.166.1.el8_10RLSA-2026:70402
Rocky Linux:8kernel-rt0:4.18.0-553.166.1.rt7.507.el8_10RLSA-2026:70403
Ubuntu:22.04:LTSlinux5.15.0-173.183UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux6.8.0-110.110UBUNTU-CVE-2025-71082
Ubuntu:25.10linux6.17.0-22.22UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-aws5.15.0-1103.110UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-aws6.8.0-1052.55UBUNTU-CVE-2025-71082
Ubuntu:25.10linux-aws6.17.0-1012.12UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure5.15.0-1109.118UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-azure6.8.0-1054.60UBUNTU-CVE-2025-71082
Ubuntu:25.10linux-azure6.17.0-1013.13UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1013.13~24.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1109.118.1UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2025-71082
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-gcp5.15.0-1103.112UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-gcp6.8.0-1054.57UBUNTU-CVE-2025-71082
Ubuntu:25.10linux-gcp6.17.0-1012.12UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-gke5.15.0-1099.105UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-gke6.8.0-1050.56UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1086.94UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1037.40UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-22.22~24.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-110.110~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-ibm5.15.0-1097.100UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-ibm6.8.0-1051.51UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1051.51~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1098.104UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-kvm5.15.0-1095.100UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-173.183UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-110.110.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-110.110.1~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1098.99UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1051.54UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1018.18UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1051.54~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1051.54.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1055.55UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1022.22UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1044.44UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1020.20UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-oracle5.15.0-1100.106UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-oracle6.8.0-1049.50UBUNTU-CVE-2025-71082
Ubuntu:25.10linux-oracle6.17.0-1011.11UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1011.11~24.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1049.50~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-raspi5.15.0-1097.100UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-raspi6.8.0-1052.56UBUNTU-CVE-2025-71082
Ubuntu:25.10linux-raspi6.17.0-1013.13UBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71082
Ubuntu:25.10linux-realtime6.17.0-1010.11UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71082
Ubuntu:25.10linux-riscv6.17.0-22.22.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-riscv-6.176.17.0-22.22.1~24.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-110.110~22.04.1UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-71082
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2025-71082
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1067.71UBUNTU-CVE-2025-71082

Affected products (as reported)

VendorProductVersions
Linux Linux 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 – before fff9206b0907252a41eb12b7c1407b9347df18b198921dbd00c4e2e4bdd56423cb5edf98d57b45f7 – before cca0e9206e3bcc63cd3e72193e60149165d493cc98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 – before c0ecb3e4451fe94f4315e6d09c4046dfbc42090b98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 – before 1e54c19eaf84ba652c4e376571093e58e144b33998921dbd00c4e2e4bdd56423cb5edf98d57b45f7 – before fdf7c640fb8a44a59b0671143d8c2f738bc4800398921dbd00c4e2e4bdd56423cb5edf98d57b45f7 – before 252714f1e8bdd542025b16321c790458014d6880
Linux Linux 3.7

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References