Bluetooth ISO Socket Issue in Linux Kernel

CVE-2026-80721

What is CVE-2026-80721?

A vulnerability in the Bluetooth ISO implementation of the Linux kernel can lead to dangling references in ISO connections. Specifically, after the deletion of an ISO connection (iso_conn), the system risks dereferencing the connection handle (hcon) due to improper management of references. To mitigate this issue, the kernel has been updated to ensure that the connection handle is explicitly cleared in the iso_conn_del() function. This change simplifies the handling of connection references and reduces the complexity associated with race conditions regarding reference management.

References