CVE-2026-74510

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cancellation The pairing completion and authentication failure callbacks look up the pending MGMTOPPAIRDEVICE command by walking hdev-mgmtpending. The lookup returned a command that was...

EUVD-2026-59703

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cancellation The pairing completion and authentication failure callbacks look up the pending MGMTOPPAIRDEVICE command by walking hdev-mgmtpending. The lookup returned a command that was...

CVE-2026-74510

CVE-2026-74510 affects the Linux kernel Bluetooth mgmt subsystem. It describes a use-after-free (UAF) in pair command cancellation: pairing completion and authentication failure callbacks could dereference a command freed due to races on the shared mgmt_pending list. The root cause is a lookup th...