Bluetooth Vulnerability in Linux Kernel by The Linux Foundation

CVE-2026-74539

What is CVE-2026-74539?

A vulnerability has been identified in the Linux kernel affecting Bluetooth functionality. Specifically, the issue arises in the iso_sock_getname function, where the iso_pi(socket)->conn requires the lock_sock to be held but is not. This oversight could lead to potential access issues or exploitation risks, as the lack of proper locking mechanisms may allow unauthorized access to the connection information. The vulnerability has been addressed by implementing necessary lock and release commands to ensure secure access and maintain system integrity.

References