Riskcovery

CVE-2026-98293

Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()

iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when iso_sock_alloc() fails only calls release_sock() and returns, leaking the reference and thus the parent socket itself.

Drop the reference on that path as well.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 11dc486ed5d4626e6b92a23b67ed76cb6c48bfc9 to before ea8a262662be62c095789924c11722ecbf40a4deAffected
  • fa224d0c094a458e9ebf5ea9b1c696136b7af427 to before 9228f87365e68a6cae191f57f456e89a6d2167cfAffected
  • fa224d0c094a458e9ebf5ea9b1c696136b7af427 to before e2b156a8d25966be49c1f809b654a2c4bb16564dAffected
  • fa224d0c094a458e9ebf5ea9b1c696136b7af427 to before f016daabd4fec4e9b8563f8b6f42eabce0ca66b0Affected
  • fa224d0c094a458e9ebf5ea9b1c696136b7af427 to before ca18ee413a7cb6f09885778039225e58bae0d607Affected
  • 6.6.67 to before 6.6.158Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.