CVE-2026-74537

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the Bluetooth ISO implementation. The iso conn ready() function accesses the conn->sk socket without holding the conn->lock or a proper refcount. This allows a race condition where a concurrent call to iso sock release() can nullify and release the socket while iso conn ready() is still attempting to use it, leading to a memory corruption or system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.