Bluetooth Vulnerability in Linux Kernel Affects Multiple Devices

CVE-2026-74538

What is CVE-2026-74538?

A vulnerability exists in the Linux kernel within the Bluetooth module, specifically during the iso_connect_ind function where the socket is accessed without proper locking. This issue can lead to potential misuse of resources, especially if the socket state has transitioned away before the lock is acquired. A fix has been implemented to address this by ensuring that locks are properly added and released during the connection indication process, thereby enhancing the stability and security of Bluetooth operations.

References