Vulnerability in Linux

CVE-2026-64433

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete add_device_complete() runs from the hci_cmd_sync_work kworker, which holds only hci_req_sync_lock and…

Affected products

  • Linux — versions 31492b8386e5a243df26ca4a9421f6b041f414d5, 28826a89fdfd49f3291980c2e68b8a7c5d55e199, 1e2e3044c1bc64a64aa0eaf7c17f7832c26c9775

References