Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98293

Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when iso_sock_alloc() fails only calls release_sock() and returns, leaking the reference and thus the parent socket itself. Drop the reference on that path as well.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 11dc486ed5d4626e6b92a23b67ed76cb6c48bfc9 to < ea8a262662be62c095789924c11722ecbf40a4deaffected
  • fa224d0c094a458e9ebf5ea9b1c696136b7af427 to < 9228f87365e68a6cae191f57f456e89a6d2167cfaffected
  • fa224d0c094a458e9ebf5ea9b1c696136b7af427 to < e2b156a8d25966be49c1f809b654a2c4bb16564daffected
  • fa224d0c094a458e9ebf5ea9b1c696136b7af427 to < f016daabd4fec4e9b8563f8b6f42eabce0ca66b0affected
  • fa224d0c094a458e9ebf5ea9b1c696136b7af427 to < ca18ee413a7cb6f09885778039225e58bae0d607affected
  • 6.6.67 to < 6.6.158affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.112 to ≤ 6.12.*unaffected
  • 6.18.54 to ≤ 6.18.*unaffected
  • 7.2.8 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References