In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hciconn: hold conn reference in abortconn_sync()
There is theoretical UAF if the conn is freed while the hci_sync task is running.
Hold refcount to avoid that.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-96201.json"