CVE-2025-21969 Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bluetooth Vulnerabilities CVE-2024-36013 and CVE-2025-21969 Addressed Two Bluetooth vulnerabilities have been reported, CVE-2024-36013 and CVE-2025-21969, both related to the L2CAP protocol. CVE-2024-36013 involves a slab-use-after-free issue in the l2cap_connect() function, while CVE-2025-21969 addresses a similar issue in l2cap_send_cmd. These vulnerabilities could potentially affect systems utilizing Bluetooth technology. 4 sources 46