CVE-2026-74539

Summary

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: lock sk in iso_sock_getname

Accessing iso_pi(sk)->conn requires lock_sock, which is not held here.

Fix by adding the lock/release.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux2df108c227b266a9ec9e3fda3828d2ac9662aa33 < 72d5bb1d77d7c3330146dc0cfd43f704c64b9594affected
LinuxLinux2df108c227b266a9ec9e3fda3828d2ac9662aa33 < 202670e6602e068558c1fca2df40719ee91a2906affected
LinuxLinux2df108c227b266a9ec9e3fda3828d2ac9662aa33 < 89cf154d7c18e6e94a3da83051f3cf2bac317ae2affected
LinuxLinux6.16affected
LinuxLinux0 < 6.16unaffected
LinuxLinux6.18.44 <= 6.18.*unaffected
LinuxLinux7.1.8 <= 7.1.*unaffected
LinuxLinux7.2-rc6 <= *unaffected

Weaknesses

References