7.8

CVE-2026-74529

Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback

There is theoretical UAF if the conn is freed while the hci_sync task is
running.

Hold refcount to avoid that.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 6d0417e4e1cf66fd917f06f0454958362714ef7d
Version < c53c70ec289ee12f20c4f1b2fbfd151762c01f67
Status affected
Version 6d0417e4e1cf66fd917f06f0454958362714ef7d
Version < 44fc74069d8988f2825246f9401218e29de2c0ab
Status affected
Version eb8b860e87b296bd1874c79a668081efd00f9754
Status affected
Version 94bf6380e936339a700c0b3171a49baf512aa70b
Status affected
Version 6.12.28
Version < 6.13
Status affected
Version 6.14.6
Version < 6.15
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.15
Status affected
Version 0
Version < 6.15
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.022
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/c53c70ec289ee12f20c4f1b2fbfd151762c01f67
https://git.kernel.org/stable/c/44fc74069d8988f2825246f9401218e29de2c0ab