AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-68390

HIGH · CVSS 8.8 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

A vulnerability exists in the Linux kernel's Bluetooth subsystem, where the lack of proper locking during hci_conn_params lookups can lead to unsafe list iterations or parameter access. This could potentially allow for race conditions or data corruption, impacting system stability and security. Organizations using Linux systems with Bluetooth capabilities should prioritize addressing this issue to mitigate potential risks.

CVE
CVE-2026-68390
Severity
HIGH
CVSS
8.8
EPSS
0.22%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_params_lookup requires hdev->lock be held, otherwise the list iteration or param access is not safe. Hold hdev->lock for params lookups in hci_sync.