CVE-2026-68392: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: mgmt: fix locking in unpairdevice/disconnectsync
Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF.
Take hdev->lock for hciconn lookup and hciabortconn(). Don't use RCU to ensure the conn is fully initialized at this point.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68392?
CVE-2026-68392 has a risk rating of 40, indicating a moderate severity level.
How do I fix CVE-2026-68392?
To fix CVE-2026-68392, update your Linux Kernel to the latest stable version that includes the fix for this vulnerability.
What is CVE-2026-68392 about?
CVE-2026-68392 addresses an issue in the Linux kernel's Bluetooth management subsystem related to improper locking leading to potential use-after-free vulnerabilities.
Which Linux Kernel versions are affected by CVE-2026-68392?
CVE-2026-68392 affects previous versions of the Linux Kernel before the patch was applied, so ensure you are using an updated version.
Is CVE-2026-68392 a remote attack vector?
CVE-2026-68392 could potentially be exploited remotely if an attacker targets vulnerable Bluetooth connections.