Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-74538

Bluetooth: ISO: lock sk in iso_connect_ind

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the "ev3" part of iso_connect_ind. It may also be NULL if socket has transitioned away from the LISTEN/CONNECT states before locking. Fix by adding lock/release. Recheck hcon is valid after lock acquire where needed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb to < 0e830354c120954ccb9ca15880245912722c4031affected
  • 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb to < e8e9cff6d80eeec28dec4cf7cc18662986945391affected
  • 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb to < 9bee7e476534f27e830658dad962d85da9edf6bfaffected
  • 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb to < 4311fd6f429065a8ba208660360a895627a00cf3affected
  • 489efc9ae36f164423f5fa7ace772a7ab8131cd8affected
  • 6.8.9 to < 6.9affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References