CVE-2025-38099: Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-03 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken A SCO connection without the proper voice_setting can cause the controller to lock up.

Affected products

Linux kernel: before 6.12.31; from 6.13 before 6.14.9 — fixed in 6.12.31, 6.14.9

How to fix

Upgrade to a fixed version: Linux kernel 6.12.31, 6.14.9. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/14d17c78a4b1660c443bae9d38c814edea506f62
https://git.kernel.org/stable/c/ec1f015ec0c6fd250a6564e8452f7bb3160b9cb1
https://git.kernel.org/stable/c/f48ee562c095e552a30b8d9cc0566a267b410f8a

Get alerted when CVE-2025-38099 or the next vulnerability affects your stack