UNKNOWN NVD
CVE-2026-74530
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback There is theoretical UAF
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback
There is theoretical UAF if the conn is freed while the hci_sync task is
running.
Hold refcount to avoid that. Handle NULL hcon, return 0 + do nothing to
match the previous behavior.
References
- https://git.kernel.org/stable/c/2d91e6244b69d752503b2d44020d8b0e323dbd38
- https://git.kernel.org/stable/c/56e78b670356caab0b607e8aad4cf819a1909d07
This unknown severity vulnerability was published on 2026-08-15 via NVD.
vulnfeed aggregates 11803 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.