CVE-2026-80764

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue exists in the Bluetooth component where the hci cc reset() function clears the Low Energy (LE) accept and resolving lists without acquiring the hdev->lock. This lack of synchronization allows a race condition between the reset completion process and a debugfs read operation. Specifically, while a debugfs reader holds the lock and fetches an entry, the hci rx work process can delete and free that same entry. Consequently, the reader dereferences a freed list entry, potentially following a stale pointer. This was identified via KASAN as a slab-use-after-free in the white list show() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.