← All advisories

High severity7.8NVD Advisory· Published Aug 10, 2026· Updated Aug 23, 2026

CVE-2026-68392

CVE-2026-68392

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync

Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF.

Take hdev->lock for hci_conn lookup and hci_abort_conn(). Don't use RCU to ensure the conn is fully initialized at this point.

Affected products

15

Linux/Kernelllm-fuzzy
osv-coords14 versions
pkg:linux/kernel pkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
< 6.6.148+ 13 more
- (no CPE)range: < 6.6.148
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1.160000.2.22
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.