CVE-2026-68391

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth management component where RCU-protected pointers are dereferenced outside critical sections, which can lead to a Use-After-Free (UAF) condition. UAF occurs when a program continues to use a pointer after the memory it points to has been freed. Additionally, the use of hci conn in hci sync callbacks requires a refcount to prevent UAF. A data race may also occur when accessing conn->state if hdev->lock is not held.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.