Back to CVE records
High 8.0Published Aug 15, 2026
CVE-2026-74539Bluetooth: ISO: lock sk in iso_sock_getname
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_sock_getname Accessing iso_pi(sk)->conn requires lock_sock, which is not held here. Fix by adding the lock/release.
- CVSS
- 8.0 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2df108c227b266a9ec9e3fda3828d2ac9662aa33 before 72d5bb1d77d7c3330146dc0cfd43f704c64b9594; from 2df108c227b266a9ec9e3fda3828d2ac9662aa33 before 202670e6602e068558c1fca2df40719ee91a2906; from 2df108c227b266a9ec9e3fda3828d2ac9662aa33 before 89cf154d7c18e6e94a3da83051f3cf2bac317ae2 | CNA record |
References
- https://git.kernel.org/stable/c/72d5bb1d77d7c3330146dc0cfd43f704c64b9594
- https://git.kernel.org/stable/c/202670e6602e068558c1fca2df40719ee91a2906
- https://git.kernel.org/stable/c/89cf154d7c18e6e94a3da83051f3cf2bac317ae2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.