CVE-2026-68188

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue exists in the Bluetooth RFCOMM component. The function rfcomm tty set termios() checks dlc->session without acquiring the rfcomm mutex and subsequently passes the pointer to rfcomm send rpn(), which dereferences session->initiator and session->sock. Simultaneously, krfcommd can unlink the DLC and free the session while holding the rfcomm mutex, leading to a race condition where a task may read from a freed memory location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.