SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74528

HIGH · CVSS 8 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the Bluetooth subsystem, specifically in the handling of connection references during the hci_past_sync() callback. This flaw could potentially lead to the use of freed pointers, resulting in undefined behavior or memory corruption. Organizations utilizing Linux systems with Bluetooth capabilities should prioritize this issue to mitigate risks associated with memory management vulnerabilities.

CVE
CVE-2026-74528
Severity
HIGH
CVSS
8
EPSS
0.23%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_past_sync() callback Avoids giving freed pointers to hci_conn_valid(), which kmalloc may have reused. Hold refcount to avoid that.