CVE-2026-63871 Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls

🗓️ 19 Jul 2026 14:18:39Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Linux Bluetooth ISO data race in hci_get_route; iso_pi fields snapshot under lock_sock.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-63871	19 Jul 202616:03	–	circl
CVE	CVE-2026-63871	19 Jul 202614:18	–	cve
Cvelist	CVE-2026-63871 Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls	19 Jul 202614:18	–	cvelist
EUVD	EUVD-2026-45556	19 Jul 202614:18	–	euvd
NVD	CVE-2026-63871	19 Jul 202615:16	–	nvd
OSV	DEBIAN-CVE-2026-63871	19 Jul 202615:16	–	osv
OSV	UBUNTU-CVE-2026-63871	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61188	19 Jul 202600:00	–	ptsecurity
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-63871	19 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/859bb1f4cb615d98c9c1ab2bd76ebb0b8fe46020
git	www.git.kernel.org/stable/c/9798f7d41d85ff763afd1f1cc0533b5c416c8348
git	www.git.kernel.org/stable/c/9ca7053d6215d89c33f28893bfd1625a32919d3f
git	www.git.kernel.org/stable/c/ab84fd7779a2a7ff5d2c8eac212c43733f56216e
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63871.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-63871

20 Jul 2026 03:47Current

5.2Medium risk

Vulners AI Score5.2

EPSS0.00157

linux kernel bluetooth iso data race hci get route lock socket iso protocol fields concurrent access