CVE-2026-98734

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize SCO and ISO scheduling with teardown hcilowsent selects a connection under RCU but drops the read lock before calculating its quota and returning it to the scheduler. The connection is then used...

EUVD-2026-103819

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize SCO and ISO scheduling with teardown hcilowsent selects a connection under RCU but drops the read lock before calculating its quota and returning it to the scheduler. The connection is then used...

CVE-2026-98734

The Linux kernel contains a use-after-free vulnerability in the hci_core component. The issue arises because hci_low_sent() drops the RCU read lock before calculating the connection quota, allowing hci_abort_conn_sync() to remove and free the connection while it is still being accessed by hci_sch...

CVE-2026-98734 Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize SCO and ISO scheduling with teardown hcilowsent selects a connection under RCU but drops the read lock before calculating its quota and returning it to the scheduler. The connection is then used...