8

CVE-2026-74539

Bluetooth: ISO: lock sk in iso_sock_getname

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: lock sk in iso_sock_getname

Accessing iso_pi(sk)->conn requires lock_sock, which is not held here.

Fix by adding the lock/release.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 2df108c227b266a9ec9e3fda3828d2ac9662aa33
Version < 72d5bb1d77d7c3330146dc0cfd43f704c64b9594
Status affected
Version 2df108c227b266a9ec9e3fda3828d2ac9662aa33
Version < 202670e6602e068558c1fca2df40719ee91a2906
Status affected
Version 2df108c227b266a9ec9e3fda3828d2ac9662aa33
Version < 89cf154d7c18e6e94a3da83051f3cf2bac317ae2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.164
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8 2.1 5.9
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/72d5bb1d77d7c3330146dc0cfd43f704c64b9594
https://git.kernel.org/stable/c/202670e6602e068558c1fca2df40719ee91a2906
https://git.kernel.org/stable/c/89cf154d7c18e6e94a3da83051f3cf2bac317ae2