2 matches found
EUVD-2026-55578
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpairdevice/disconnectsync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev-lock for hciconn lookup and hciabortconn. Don't use RCU to ensur...
5.3AI score
SaveExploits0References5
CVE-2026-68392
The CVE-2026-68392 entry documents a Linux kernel Bluetooth mgmt issue where dereferencing RCU-protected pointers outside critical sections could cause use-after-free. The fix replaces RCU-based lookup with taking hdev->lock for hci_conn lookup and hci_abort_conn to ensure the connection is fu...
5.3AI score
SaveExploits0References5
20