CVE-2026-74541

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the Bluetooth ISO implementation. The problem occurs when detaching a connection from a host connection (hcon), where failing to clear iso data while setting conn->hcon to NULL leads to a slab-use-after-free in the iso conn hold unless zero() function. This condition is triggered during a sequence of iso sock release() followed by hci abort conn sync(). The issue is addressed by ensuring iso data is properly cleared within the iso sock disconn() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.