CVE-2026-80666

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc4

Description A race condition exists in the Bluetooth SCO component. The function sco sock timeout() runs asynchronously and acquires a socket lock. If a socket is closing while the timer is active, the system may attempt to hold the same lock twice, resulting in a deadlock. This occurs when sco sock close() calls disable delayed work sync() while already holding the lock, which then conflicts with the lock acquisition in sco sock timeout().

Recommendations Update the Linux kernel to version 6.13.0-rc4 or later.