CVE-2026-74535

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth ISO implementation where the iso sock timeout() function acquires lock sock. Synchronously disabling the timer while holding this lock can result in a deadlock. Additionally, iso sock timeout() can execute concurrently with iso conn del(), leading to a Use-After-Free (UAF) condition. This occurs when iso conn put() triggers iso conn free(), which attempts to access conn->hcon->iso data after the hcon object has been freed by the caller in the iso chan del() path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.