Get real-time updates on Telegram
CVE-2025-40318: Linux 6.9
CVE-2025-40318. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.0027 (percentile 0.17829), scored 13-Oct-2026.
Affected technology
Linux · f00f36db76eb8fd10d13e80e2590f23b5beaa54d to before 0a94f7e017438935c09ef833a1aa908ad9875213, 1499f79995c7ee58e3bfeeff75f6d1b37dcda881 to before 932c0a4f77ac13e526fdd5b42914d29c9821d389, 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before ae76cf6c2c842944c6514c57df54d728f1916553, 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 9cd536970192b72257afcdfba0bfc09993e6f19c, 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 09b0cd1297b4dbfe736aeaa0ceeab2265f47f772, 357603f4d396d85fbf0045512efaf1d7f7394ed7, 6.1.120 to before 6.1.159, 6.6.51 to before 6.6.117, 6.8.9 to before 6.9
Linux
Linux · 6.9
Linux
Component: Not specified by the source
File: net/bluetooth/hci_sync.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.3 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.0027 · percentile 0.17829 · 2026-10-13
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:07:31.726917+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40318.html