CVE-2026-80721

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

CVE-2026-80721

A dangling pointer vulnerability exists in the Linux kernel Bluetooth ISO (Isochronous) subsystem. After iso_conn_del() is called, ISO sockets may still dereference the hcon (HCI connection) pointer because clearing iso_conn::hcon previously relied on iso_conn_del() releasing the last reference t...

EUVD-2026-67456

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

CVE-2026-80721 Bluetooth: ISO: ensure no dangling hcon references in iso_conn

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

Linux Distros Unpatched Vulnerability : CVE-2026-80721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing...

CVE-2026-80721: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

PT-2026-83021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where ISO sockets may dereference the hcon reference after the iso conn del function has been called. This occurs because the clearing...

PT-2026-86719

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in iso conn After iso conn del, ISO sockets should not dereference the hcon any more. Currently, clearing iso conn::hcon relies on iso conn del releasing the last reference to th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098931)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098931 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Proper handling of “hold” state in “isoconnready”. The dereferencing of “sk” in “isoconnready” must be done either under “conn-lock” or while holding the reference count, to avoid concurrent closure. Currently,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in isosockgetname Accessing isopisk-conn requires locksock, which is not held here. The issue was fixed by adding the lock/release mechanism...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Fixed issues related to locking and validity checks for isoconn. sk-skstate indicates whether isopisk-conn is valid. Operations that check or update skstate and access conn should hold locksock; otherwise, they...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: fixed improper handling of malformed ISOEND/CONT packets. The Core Specification Part C, Volume 4, Section 5.4.5 does not exclude empty ISOCONT and ISOEND packets. Currently, we reject such packets if they are...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of isoconn The functions isoconndel and isochandel involve a race condition that can lead to a double deletion of isoconn. Task hdev-workqueue Task 2 isoconndel isochandel isoconnholdunlesszero...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Clearing the isodata field always when detaching the conn field from the hcon field. When setting conn-hcon = NULL, it is also necessary to set conn-hcon-isodata = NULL. Otherwise, the subsequent call to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: avoiding deadlocks in isosocktimeout The isosocktimeout function takes locksock, so disabling the timer while holding that lock may lead to a deadlock. isosocktimeout may also run concurrently with isoconndel,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In the ISO section, there was a issue where references to the socket would leak after the socket is released. The function isosockkill checks whether !sockflagsk, SOCKZAPPED is true, and also checks whether...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sock in isoconnectind Accessing iso.pisock-conn requires locksock, which is not set in the "ev3" part of isoconnectind. It may also be NULL if the socket has transitioned away from the LISTEN/CONNECT states...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In the ISO section, a race condition between krefgetunlesszero and kfree has been fixed. hciconn::isodata is accessed and modified without proper locking or using a Read-Copy-Update RCU mechanism. This leads to a ra...

CVE-2026-74534

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. A race condition between isoconndel and isochandel functions can lead to a double-put of isoconn objects. This can result in a Use-After-Free UAF vulnerability, potentially allowing an attacker to cause a denial of service or achieve...