CVE-2026-74541

Received Received - Intake

Bluetooth Use-After-Free in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso_data always when detaching conn from hcon When setting conn->hcon = NULL, also conn->hcon->iso_data = NULL is necessary, otherwise later iso_conn_free() will UAF. Fix clearing of iso_data in iso_sock_disconn() Fixes KASAN: slab-use-after-free in iso_conn_hold_unless_zero on iso_sock_release() followed by hci_abort_conn_sync().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74541

EUVD

EUVD-2026-59734

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in the Linux kernel's Bluetooth ISO (isochronous) connection handling. When a Bluetooth connection is detached, the kernel fails to properly clear a reference to freed memory, leading to a situation where the memory is accessed after being freed. This can cause system instability or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's Bluetooth ISO implementation and may not have direct network detection commands. Monitor kernel logs for slab-use-after-free errors related to iso_conn_hold_unless_zero or iso_sock_release. Check for Bluetooth connection crashes or unexpected disconnections.

Impact Analysis

If exploited, this vulnerability could allow an attacker to crash the system or execute arbitrary code with kernel privileges. This could lead to denial-of-service conditions or potential privilege escalation on affected systems using Bluetooth ISO connections.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level Linux kernel Bluetooth issue. Compliance impacts would depend on system-specific implementations and mitigations rather than the vulnerability itself.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. If immediate patching is not possible, consider disabling Bluetooth ISO functionality temporarily until the patch is applied.

Hi! I’m here to help you understand CVE-2026-74541. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70