Linux Kernel Bluetooth Component Vulnerability Affecting Discovery Process

CVE-2026-93247

What is CVE-2026-93247?

A vulnerability in the Linux Kernel Bluetooth component could lead to a NULL pointer dereference in the discovery process. The issue arises from improper synchronization when accessing the 'uuid_count' and 'uuids' member of the 'discovery_state' structure. Specifically, there is a race condition where 'uuid_count' can be non-zero while 'uuids' is NULL, leading to a crash when the system attempts to dereference a null pointer. This vulnerability necessitates careful management of locks surrounding read and write operations on these members to prevent inconsistencies and ensure stability during Bluetooth device discovery.

References