CVE-2026-74539

Bluetooth: ISO: lock sk in iso_sock_getname

State: Published
Severity: 8.0 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: lock sk in iso_sock_getname

Accessing iso_pi(sk)->conn requires lock_sock, which is not held here.

Fix by adding the lock/release.

Scores

CVSS	Score	Vector	Source
3.1	8.0 High	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2df108c227b266a9ec9e3fda3828d2ac9662aa33 to before 72d5bb1d77d7c3330146dc0cfd43f704c64b9594Affected 2df108c227b266a9ec9e3fda3828d2ac9662aa33 to before 202670e6602e068558c1fca2df40719ee91a2906Affected 2df108c227b266a9ec9e3fda3828d2ac9662aa33 to before 89cf154d7c18e6e94a3da83051f3cf2bac317ae2Affected
LinuxLinux	6.16Affected before 6.16Not affected 6.18.44 through 6.18.Not affected 7.1.8 through 7.1.Not affected 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.