CVE-2025-68306 | Linux Kernel up to 6.12.60/6.17.10 Bluetooth hci_cmd_sync_work null pointer dereference

A vulnerability was found in Linux Kernel up to 6.12.60/6.17.10. It has been declared as critical. Affected by this issue is the function hci_cmd_sync_work of the component Bluetooth. Executing manipulation can lead to null pointer dereference.

This vulnerability is tracked as CVE-2025-68306. The attack is only possible within the local network. No exploit exists.

It is recommended to upgrade the affected component.