Linux Kernel Bluetooth Vulnerability in SCO Connections

CVE-2026-89774

What is CVE-2026-89774?

A vulnerability in the Linux kernel affects Bluetooth socket connections, particularly in the 'sco_conn_ready' function, where improper handling of sk dereferencing can lead to a Use After Free (UAF) condition. The vulnerability arises when accessing 'conn->sk' and its parent socket without appropriate locking mechanisms, which may allow concurrent close scenarios. The fix involves ensuring that reference counting and locking practices are correctly implemented to prevent access to potentially invalid sockets, safeguarding against UAF exploits.

References