CVE-2026-64404

CVE-2026-64404 concerns the Linux kernel Bluetooth ISO stack. The vulnerability arises in iso_conn_big_sync(): it drops the socket lock to call hci_get_route(), then re-acquires the lock but may dereference iso_pi(sk)->conn->hcon without re-checking that conn is still valid. While the lock ...

CVE-2026-53251

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on isoconnbigsync hcigetroute returns a reference-counted hcidev pointer via hcidevhold. The function exits normally or with an error without ever releasing it...