SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74539

HIGH · CVSS 8 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's Bluetooth implementation, specifically in the handling of ISO sockets where the necessary socket lock is not held during access to connection information. This oversight could potentially lead to race conditions or other unintended behaviors, impacting system stability and security. Organizations using Linux-based systems with Bluetooth capabilities should prioritize addressing this issue to mitigate potential risks.

CVE
CVE-2026-74539
Severity
HIGH
CVSS
8
EPSS
0.25%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_sock_getname Accessing iso_pi(sk)->conn requires lock_sock, which is not held here. Fix by adding the lock/release.