Use-After-Free Vulnerability in Linux Kernel Bluetooth ISO Component

CVE-2026-80914

What is CVE-2026-80914?

A vulnerability exists within the Bluetooth ISO component of the Linux kernel, where a use-after-free condition may occur due to improper socket management. In the function iso_conn_ready(), a reference is taken to a BIS listener socket, but it fails to verify the socket's state before creating a child socket. If the listener socket is closed concurrently, the reference may become a dangling pointer, leading to potential attacks through dereferencing freed memory areas. The vulnerability can be mitigated by ensuring that the listener socket remains valid and active before proceeding with socket operations.

References