Improper Memory Management in Linux Kernel Bluetooth Component

CVE-2026-74537

What is CVE-2026-74537?

A vulnerability exists in the Bluetooth component of the Linux kernel due to improper memory management associated with socket connections. Specifically, during the 'iso_conn_ready' process, the socket (sk) is accessed without proper synchronization controls, allowing a potential use after free condition. This occurs when the socket is released while still in use, leading to undefined behavior and potential exploitation. The fix ensures that the socket's reference count is correctly managed, requiring it to be held in the 'iso_conn_ready' function to prevent concurrent access issues. Additionally, the implementation now verifies that the socket remains valid following the locking process, enhancing overall stability and security.

References