Bluetooth Protocol Vulnerability in Linux Kernel

CVE-2026-74535

What is CVE-2026-74535?

A vulnerability in the Linux kernel's Bluetooth subsystem related to iso_sock_timeout has been identified. The function iso_sock_timeout could cause deadlocks by improperly managing the timer while holding locks. Additionally, this function may run concurrently with iso_conn_del, leading to a Use After Free condition. This can allow an attacker to manipulate connections improperly and potentially lead to undesirable behaviors or system instability. Remediation steps involve removing the disabling of the timer from the lock_sock sections, ensuring that timer management is decoupled from connection management to prevent such vulnerabilities.

References