CVE-2025-40301

CVE-2025-40301 addresses a vulnerability in the Linux kernel's Bluetooth HCI event handling. Specifically, the hci_cmd_complete_evt() function could attempt to access uninitialized memory (skb->data[0]) when processing an unknown command complete event if the skb (socket buffer) was empty due to prior data pulling. This issue affects the Linux kernel's Bluetooth stack. While no CVSS score is provided, the vulnerability's FAUCET Risk Score is 7/100, suggesting a low overall risk. The attack vector involves malformed Bluetooth command complete events, and the complexity of exploiting this to achieve a significant impact (e.g., privilege escalation or denial of service) is likely high, as it relies on a specific race condition or state within the kernel's Bluetooth stack. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, indicating a low level of attention for this vulnerability.