CVE-2026-89774

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the Bluetooth SCO implementation. The problem occurs because the socket sk is dereferenced in the sco conn ready() function without holding the conn->lock or a proper refcount, allowing a concurrent close operation in sco sock release to nullify and release the socket while it is still being accessed. A similar issue affects the return value of the sco get sock listen() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.