CVE-2026-74538

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74538
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74538.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74538
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (6)
UBUNTU (1)
Related
openSUSE (1)
SUSE (6)
Published
2026-08-15T12:27:50Z
Modified
2026-10-28T02:30:33Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Bluetooth: ISO: lock sk in iso_connect_ind
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: lock sk in iso_connect_ind

Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the "ev3" part of iso_connect_ind. It may also be NULL if socket has transitioned away from the LISTEN/CONNECT states before locking.

Fix by adding lock/release. Recheck hcon is valid after lock acquire where needed.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74538.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
168d9bf9c7f01df71e6404cfff66d9c2a8e968fb
Fixed
0e830354c120954ccb9ca15880245912722c4031
Fixed
e8e9cff6d80eeec28dec4cf7cc18662986945391
Fixed
9bee7e476534f27e830658dad962d85da9edf6bf
Fixed
4311fd6f429065a8ba208660360a895627a00cf3
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.8.9
Fixed
6.9
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
489efc9ae36f164423f5fa7ace772a7ab8131cd8

Affected versions

v6.*
v6.8.10
v6.8.11
v6.8.12
v6.8.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74538.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.44
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74538.json"