CVE-2026-74302

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Bluetooth component. The hci unregister dev() function fails to disable cmd timer and ncmd timer before the hci dev structure is freed. If a timeout occurs during device teardown, the callback attempts to access freed memory, specifically the hdev->reset function pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.