Wind River Support Network

HomeDefectsLIN1022-19683

Fixed

LIN1022-19683 : Security Advisory - linux - CVE-2025-40283

Created: Dec 8, 2025 Updated: Jun 1, 2026

Resolved Date: May 25, 2026

Found In Version: 10.22.33.1

Fix Version: 10.22.33.24

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF[EOL][EOL]There is a KASAN: slab-use-after-free read in btusb_disconnect().[EOL]Calling "usb_driver_release_interface(&btusb_driver, data->intf)" will[EOL]free the btusb data associated with the interface. The same data is[EOL]then used later in the function, hence the UAF.[EOL][EOL]Fix by moving the accesses to btusb data to before the data is free'd.

CVEs

CVE-2025-40283