Riskcovery

CVE-2026-80721

Bluetooth: ISO: ensure no dangling hcon references in iso_conn

State
Published
Severity
8.8 High
Published
Aug 28, 2026
Updated
Oct 16, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: ensure no dangling hcon references in iso_conn

After iso_conn_del(), ISO sockets should not dereference the hcon any more. Currently, clearing iso_conn::hcon relies on iso_conn_del() releasing the last reference to the iso_conn.

Simplify this by explicitly clearing conn->hcon in iso_conn_del(), to avoid more complex reasoning on races about who holds the last reference.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dc26097bdb864a0d5955b9a25e43376ffc1af99b to before e941799c31f68e67ce0976efb38a79101f921b64Affected
  • dc26097bdb864a0d5955b9a25e43376ffc1af99b to before cdce8af9291d8a1f8916c271de029bf558d9e8ecAffected
  • dc26097bdb864a0d5955b9a25e43376ffc1af99b to before aa9f7cb2bd3a2be998ceb739fc9a2f986eba43ebAffected
  • f53e7489273dc2bb307bf50f319b3762d45534f0Affected
  • a58d0f5dac322e16cc75334d000666512341bde5Affected
  • 6.11.11 to before 6.12Affected
  • 6.12.2 to before 6.13Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.44 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.