CVE-2025-38128 | Linux Kernel up to 6.15.2 Bluetooth mgmt_hci_cmd_sync privilege escalation

A vulnerability classified as problematic has been found in Linux Kernel up to 6.15.2. This affects the function mgmt_hci_cmd_sync of the component Bluetooth. The manipulation leads to privilege escalation.

This vulnerability is uniquely identified as CVE-2025-38128. The attack needs to be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.