CVE-2026-53072

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A locking issue exists in the Bluetooth subsystem within the hci conn request evt() function when the protocol is set to HCI PROTO DEFER. In this state, the function calls hci connect cfm(conn) without holding the hdev->lock. Because hci connect cfm() assumes the lock is held, a concurrent deletion of the conn object can lead to a Use-After-Free (UAF) condition, which occurs when a program continues to use a pointer after the memory it points to has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.