Linux Distros Unpatched Vulnerability : CVE-2026-90255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: fix the SCO setup context lifetime hcisetupsync queues a connhandlet with a NULL destroy callback, so the context is only freed if...

CVE-2026-90255

CVE-2026-90255 is a Linux kernel vulnerability in the Bluetooth HCI subsystem affecting the SCO setup context lifetime. The root cause is twofold: hci_setup_sync() queues a conn_handle_t with a NULL destroy callback, causing a memory leak when the pending entry is cancelled (e.g., during controll...

EUVD-2026-81848

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix the SCO setup context lifetime hcisetupsync queues a connhandlet with a NULL destroy callback, so the context is only freed if hcienhancedsetupsync actually runs. An entry that is cancelled instead is...