https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 00:59:54 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68393 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: hci_sync: extend conn_hash lookup critical sections</p> <p>Using RCU-protected pointers outside the critical sections without refcount is incorrect and may result to UAF.</p> <p>Extend critical section to cover both hci_conn_hash lookup and use of the returned conn.</p> <p>Add surrounding rcu_read_lock() also when return value is not used, in preparation for RCU lockdep requirement to hci_lookup_le_connect().</p> <p>This avoids concurrent deletion of the conn before we are done dereferencing it.</p> <p>Also, make sure to hold hdev-&gt;lock when accessing hdev-&gt;accept_list.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: hci_sync: extend conn_hash lookup critical sections</p> <p>Using RCU-protected pointers outside the critical sections without refcount is incorrect and may result to UAF.</p> <p>Extend critical section to cover both hci_conn_hash lookup and use of the returned conn.</p> <p>Add surrounding rcu_read_lock() also when return value is not used, in preparation for RCU lockdep requirement to hci_lookup_le_connect().</p> <p>This avoids concurrent deletion of the conn before we are done dereferencing it.</p> <p>Also, make sure to hold hdev-&gt;lock when accessing hdev-&gt;accept_list.</p> https://vulnerability.circl.lu/vuln/cve-2026-68393