CyberRota Analysis
AI-GeneratedA vulnerability exists in the Linux kernel's Bluetooth subsystem, where a use-after-free (UAF) condition may occur if a connection is freed while the hci_sync task is executing. This could potentially lead to memory corruption or arbitrary code execution. Linux system administrators and developers working with Bluetooth functionalities should prioritize addressing this issue to mitigate associated risks.
CVE
CVE-2026-74531
Severity
HIGH
CVSS
8.8
EPSS
0.25%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn reference in abort_conn_sync() There is theoretical UAF if the conn is freed while the hci_sync task is running. Hold refcount to avoid that.