CVE-2026-74531

Updated on 15 Aug 2026

Severity

8.8 High severity

Details

CVSS score
8.8

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_conn: hold conn reference in abort_conn_sync()

There is theoretical UAF if the conn is freed while the hci_sync task is running.

Hold refcount to avoid that.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Planned