Bluetooth Management Locking Flaw in Linux Kernel

CVE-2026-68392

What is CVE-2026-68392?

The Linux kernel is affected by a vulnerability involving improper locking mechanisms in the Bluetooth management subsystem. Specifically, the flaw arises from dereferencing pointers protected by RCU outside of critical sections, leading to potential use-after-free (UAF) scenarios. This vulnerability can compromise the integrity and security of Linux systems by allowing unauthorized access to memory that should be protected. Resolutions have been implemented to ensure that connection lookups and aborts use the appropriate locking mechanisms to prevent premature dereferencing.

References