UNKNOWN NVD
CVE-2026-74538
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Accessing iso_pi(sk)->conn requires lock_sock,
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: lock sk in iso_connect_ind
Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the
"ev3" part of iso_connect_ind. It may also be NULL if socket has
transitioned away from the LISTEN/CONNECT states before locking.
Fix by adding lock/release. Recheck hcon is valid after lock acquire
where needed.
References
- https://git.kernel.org/stable/c/4311fd6f429065a8ba208660360a895627a00cf3
- https://git.kernel.org/stable/c/9bee7e476534f27e830658dad962d85da9edf6bf
- https://git.kernel.org/stable/c/e8e9cff6d80eeec28dec4cf7cc18662986945391
This unknown severity vulnerability was published on 2026-08-15 via NVD.
vulnfeed aggregates 11803 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.