CVE-2026-68393

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth component where RCU-protected pointers are used outside of critical sections without a refcount, which may lead to a Use-After-Free (UAF) condition. UAF occurs when a program continues to use a pointer after the memory it points to has been freed. The problem involves the hci conn hash lookup and the subsequent use of the returned connection, as well as the access to hdev->accept list without holding the hdev->lock. To prevent the concurrent deletion of the connection during dereferencing, the critical section must be extended and rcu read lock() must be applied to the hci lookup le connect() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.