Riskcovery

CVE-2026-74538

Bluetooth: ISO: lock sk in iso_connect_ind

State
Published
Severity
8.8 High
Published
Aug 15, 2026
Updated
Oct 21, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: lock sk in iso_connect_ind

Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the "ev3" part of iso_connect_ind. It may also be NULL if socket has transitioned away from the LISTEN/CONNECT states before locking.

Fix by adding lock/release. Recheck hcon is valid after lock acquire where needed.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb to before 0e830354c120954ccb9ca15880245912722c4031Affected
  • 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb to before e8e9cff6d80eeec28dec4cf7cc18662986945391Affected
  • 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb to before 9bee7e476534f27e830658dad962d85da9edf6bfAffected
  • 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb to before 4311fd6f429065a8ba208660360a895627a00cf3Affected
  • 489efc9ae36f164423f5fa7ace772a7ab8131cd8Affected
  • 6.8.9 to before 6.9Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.44 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.