PT-2026-61261
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: fix UAF in hci le create cis sync hci le create cis sync dereferences conn-conn timeout after releasing both rcu read lock and hci dev lockhdev. The conn pointer was obtained from an RCU-protected iteration...