8.8

CVE-2026-74531

Bluetooth: hci_conn: hold conn reference in abort_conn_sync()

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_conn: hold conn reference in abort_conn_sync()

There is theoretical UAF if the conn is freed while the hci_sync task is
running.

Hold refcount to avoid that.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 249c88e7fb45b6b705040c5af4bd0d0f2bc9735c
Version < 64d1645f26aa49b5a86ba2fccd0bb6749ea725a6
Status affected
Version 227a0cdf4a028a73dc256d0f5144b4808d718893
Version < 963fb4b8e7d1ab07b4ae45bf15d41e667c88caca
Status affected
Version 227a0cdf4a028a73dc256d0f5144b4808d718893
Version < e8f9fef362bab431d95371d3406bc720350290c3
Status affected
Version 227a0cdf4a028a73dc256d0f5144b4808d718893
Version < fa812cfa81aa3d4a7b6ce8277979af57b3f79712
Status affected
Version 227a0cdf4a028a73dc256d0f5144b4808d718893
Version < 5761d003daa987ac81463f570713ce9c9dd204e5
Status affected
Version 7fe4d391e937c2f048a43ff4b421e677f10d83c0
Status affected
Version 58afdc9b18871eb1d461c725be9e9f3f44a39aeb
Status affected
Version 6.6.51
Version < 6.6.151
Status affected
Version 6.1.184
Version < 6.2
Status affected
Version 6.10.10
Version < 6.11
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.11
Status affected
Version 0
Version < 6.11
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.17
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/64d1645f26aa49b5a86ba2fccd0bb6749ea725a6
https://git.kernel.org/stable/c/963fb4b8e7d1ab07b4ae45bf15d41e667c88caca
https://git.kernel.org/stable/c/e8f9fef362bab431d95371d3406bc720350290c3
https://git.kernel.org/stable/c/fa812cfa81aa3d4a7b6ce8277979af57b3f79712
https://git.kernel.org/stable/c/5761d003daa987ac81463f570713ce9c9dd204e5