CVE-2026-74530: Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcisync: hold conn in hciconnectbigsync() callback
There is theoretical UAF if the conn is freed while the hcisync task is running.
Hold refcount to avoid that. Handle NULL hcon, return 0 + do nothing to match the previous behavior.
Affected Software
1 affected component
Linux Linux kernel
Event History
Aug 15, 2026
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-74530?
The severity of CVE-2026-74530 is rated at risk level 30.
2
How do I fix CVE-2026-74530?
To fix CVE-2026-74530, update your Linux kernel to the patched version provided by your distribution.
3
What is the impact of CVE-2026-74530 on Linux kernel users?
The impact of CVE-2026-74530 could potentially lead to a use-after-free situation affecting Bluetooth connections.
4
Is CVE-2026-74530 a remote exploit?
CVE-2026-74530 is not classified as a remote exploit but does affect Bluetooth connectivity.
5
When was CVE-2026-74530 published?
CVE-2026-74530 was published on August 15, 2026.