CVE-2026-98459

In the Linux kernel, the following vulnerability has been resolved: B...

CVE-2026-98459 Bluetooth: ISO: balance the parent hold in hci_bind_bis()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: balance the parent hold in hcibindbis hciconnlink takes a lifetime reference to its parent with hciconnget, but only takes an operational hold on the child. hciconnunlink later balances both a hold and a reference...

CVE-2026-98459

A vulnerability in the Linux kernel Bluetooth stack allows for a potential use-after-free or premature disconnection. The issue resides in hci_bind_bis() , where the function obtains a parent pointer from hci_conn_hash_lookup_big() without taking an operational hold. Because hci_conn_unlink() lat...

EUVD-2026-103699

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: balance the parent hold in hcibindbis hciconnlink takes a lifetime reference to its parent with hciconnget, but only takes an operational hold on the child. hciconnunlink later balances both a hold and a reference...