CVE-2026-74538Bluetooth: ISO: lock sk in iso_connect_ind
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the "ev3" part of iso_connect_ind. It may also be NULL if socket has transitioned away from the LISTEN/CONNECT states before locking. Fix by adding lock/release. Recheck hcon is valid after lock acquire where needed.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb before e8e9cff6d80eeec28dec4cf7cc18662986945391; 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb builds before 9bee7e476534f27e830658dad962d85da9edf6bf; from 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb before 4311fd6f429065a8ba208660360a895627a00cf3; 489efc9ae36f164423f5fa7ace772a7ab8131cd8; from 6.8.9 before 6.9 | CNA record |
References
- https://git.kernel.org/stable/c/e8e9cff6d80eeec28dec4cf7cc18662986945391
- https://git.kernel.org/stable/c/9bee7e476534f27e830658dad962d85da9edf6bf
- https://git.kernel.org/stable/c/4311fd6f429065a8ba208660360a895627a00cf3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.