CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: clear isodata always when detaching conn from hcon
When setting conn->hcon = NULL, also conn->hcon->isodata = NULL is necessary, otherwise later isoconnfree() will UAF.
Fix clearing of isodata in isosockdisconn()
Fixes KASAN: slab-use-after-free in isoconnholdunlesszero on isosockrelease() followed by hciabortconnsync().
Affected Software
1 affected component
Linux Linux kernel
Event History
Aug 15, 2026
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-74541?
CVE-2026-74541 has a risk rating of 43.
2
How do I fix CVE-2026-74541?
To fix CVE-2026-74541, ensure that iso_data is cleared when detaching the connection from hcon in the Linux kernel.
3
What does CVE-2026-74541 affect?
CVE-2026-74541 affects the Bluetooth subsystem of the Linux kernel.
4
What type of vulnerability is CVE-2026-74541?
CVE-2026-74541 is classified as a Use After Free vulnerability.
5
When was CVE-2026-74541 published?
CVE-2026-74541 was published on August 15, 2026.