SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74531

HIGH · CVSS 8.8 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability exists in the Linux kernel's Bluetooth subsystem, where a use-after-free (UAF) condition may occur if a connection is freed while the hci_sync task is executing. This could potentially lead to memory corruption or arbitrary code execution. Linux system administrators and developers working with Bluetooth functionalities should prioritize addressing this issue to mitigate associated risks.

CVE
CVE-2026-74531
Severity
HIGH
CVSS
8.8
EPSS
0.25%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn reference in abort_conn_sync() There is theoretical UAF if the conn is freed while the hci_sync task is running. Hold refcount to avoid that.