CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Linux.
CVE
CVE-2026-46056
Severity
HIGH
CVSS
8.8
EPSS
0.26%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.
Related CVEs
Other vulnerabilities affecting the same vendor(s)