CVE-2026-74536

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth ISO implementation where socket references leak after socket release. This occurs because the iso sock kill() function performs checks on SOCK ZAPPED, sk->sk socket, and SOCK DEAD that result in an early return, preventing iso sock destruct() from being called. Additionally, a leak occurs when iso sock close() does not set SOCK ZAPPED because iso conn del() fails to call iso sock kill() after zapping.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.