CVE-2026-64404

CVE-2026-64404 is a NULL pointer dereference in the Linux kernel's Bluetooth ISO subsystem , specifically in the iso_conn_big_sync() function. The function drops the socket lock to call hci_get_route() and re-acquires it, but dereferences iso_pi(sk)->conn->hcon without re-validating that co...