CVE-2026-53276

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Bluetooth ISO implementation. In the iso sock rebind bc() function, the bis pointer is cached and the socket lock is subsequently dropped. A concurrent close() operation can destroy the connection and free the bis structure during this unlocked window, leading to a memory access violation when hci dev lock(bis->hdev) is called.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.