A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.8. Affected is the function sco_sock_timeout of the component Bluetooth. The manipulation leads to use after free.

This vulnerability is traded as CVE-2024-27398. The attack needs to be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.