CVE-2026-80721
Received Received - Intake

Bluetooth ISO Use-After-Free in Linux Kernel

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in iso_conn After iso_conn_del(), ISO sockets should not dereference the hcon any more. Currently, clearing iso_conn::hcon relies on iso_conn_del() releasing the last reference to the iso_conn. Simplify this by explicitly clearing conn->hcon in iso_conn_del(), to avoid more complex reasoning on races about who holds the last reference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-28
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
CVE-2026-80721
EUVD
EUVD-2026-67456

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a Bluetooth ISO (isochronous) connection handling issue. When an ISO connection is deleted, the system may still try to access a dangling reference to a Bluetooth host controller (hcon). The fix ensures that the hcon reference is explicitly cleared during connection deletion to prevent potential race conditions and invalid memory access.

Detection Guidance

This vulnerability is specific to the Linux kernel's Bluetooth ISO implementation. Detection requires checking kernel logs for Bluetooth-related errors or crashes. Commands like dmesg | grep -i bluetooth or journalctl -k | grep -i bluetooth may help identify issues. Ensure your kernel version is updated to a patched release.

Impact Analysis

This vulnerability could lead to system crashes or instability if exploited, as it involves improper memory access in Bluetooth ISO connection handling. Users running affected Linux kernel versions might experience Bluetooth-related issues or unexpected system behavior.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for Bluetooth-related errors after updating. If immediate patching is not possible, consider disabling Bluetooth ISO functionality temporarily as a workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80721. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart