CVE-2026-68391

The CVE-2026-68391 entry concerns the Linux kernel Bluetooth subsystem, specifically the mgmt path: hold reference counts for hci_conn in mgmt_pending_cmds and take proper locks when looking up hci_conn and accessing conn->state. The root cause is dereferencing RCU-protected pointers outside c...