CVE-2026-63871

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix data-race on isopi fields in hcigetroute calls isoconnectbis, isoconnectcis, isolistenbis, and isoconnbigsync call hcigetroute using isopisk-dst, isopisk-src, and isopisk-srctype without holding locksock. Thes...

CVE-2026-63871

CVE-2026-63871 concerns the Linux kernel Bluetooth ISO path. The issue is a data-race on the iso_pi fields passed to hci_get_route() in iso_connect_bis(), iso_connect_cis(), iso_listen_bis(), and iso_conn_big_sync(), which read iso_pi(sk)->dst/src/src_type without holding lock_sock(). Concurre...

EUVD-2026-45556

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix data-race on isopi fields in hcigetroute calls isoconnectbis, isoconnectcis, isolistenbis, and isoconnbigsync call hcigetroute using isopisk-dst, isopisk-src, and isopisk-srctype without holding locksock. Thes...