Linux Kernel Bluetooth Component Vulnerability in ISO Data Handling

CVE-2026-74541

What is CVE-2026-74541?

A vulnerability in the Linux kernel affects the Bluetooth subsystem's handling of ISO connections. When disconnecting a connection, the iso_data associated with the connection must be cleared to prevent a use-after-free condition. Failure to do so may lead to security implications and potential exploitation. The flaw was addressed by ensuring that the iso_data is reset accordingly, mitigating the risks associated with improper memory access during the disconnection process.

References