DEBIAN-CVE-2026-74528

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold conn in hcipastsync callback Avoids giving freed pointers to hciconnvalid, which kmalloc may have reused. Hold refcount to avoid that...

CVE-2026-74528

Summary: CVE-2026-74528 affects the Linux kernel Bluetooth stack, specifically the hci_sync path. The issue involves holding a reference in hci_past_sync() to prevent a freed hci_conn pointer (which kmalloc may reuse) from being exposed to hci_conn_valid(), addressing a potential use-after-free. ...