Use-After-Free Vulnerability in Linux Kernel Bluetooth Module

CVE-2026-80692

What is CVE-2026-80692?

A use-after-free vulnerability has been identified in the Bluetooth module of the Linux Kernel. This arises when a connection object is freed while the hci_sync task is still operational, leading to potential security risks. The issue can be mitigated by maintaining a reference count to the connection during the execution of the hci_connect_acl/le_sync callbacks, ensuring safer memory management and stability in Bluetooth operations.

References