DEBIAN-CVE-2026-74528

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold conn in hcipastsync callback Avoids giving freed pointers to hciconnvalid, which kmalloc may have reused. Hold refcount to avoid that...

CVE-2026-74528

The CVE refers to the Linux kernel Bluetooth subsystem: hci_sync in the hci_past_sync() callback, which previously could dereference freed pointers to hci_conn_valid() due to kmalloc reuse. The fix holds a reference count on the connection to ensure resources remain valid, preventing use-after-fr...

Linux Distros Unpatched Vulnerability : CVE-2026-74528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: hold conn in hcipastsync callback Avoids giving freed pointers to hciconnvalid, which kmalloc may have reused. Hold refcount to avoid that...