In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync

Dereferencing RCU-protected pointers outside critical sections is
invalid and may lead to UAF.

Take hdev->lock for hci_conn lookup and hci_abort_conn(). Don't use RCU
to ensure the conn is fully initialized at this point.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
249c88e7fb45b6b705040c5af4bd0d0f2bc9735c affected < 8bc83f9ef6789571f399ff631a2a14a12b6d8585
227a0cdf4a028a73dc256d0f5144b4808d718893 affected < 579faba5ede6df6b7f36777c431dc8dcf9d272e7
227a0cdf4a028a73dc256d0f5144b4808d718893 affected < ca58ad287bfc5b9d31a72ecb8650289df2b57250
227a0cdf4a028a73dc256d0f5144b4808d718893 affected < b11511006f9e17000de3f4cadee451364f658ca3
227a0cdf4a028a73dc256d0f5144b4808d718893 affected < 16cd66443957e4ad42155c6fec401012f600c6f8
58afdc9b18871eb1d461c725be9e9f3f44a39aeb affected —
6.6.51 affected < 6.6.148
6.10.10 affected < 6.11
Linux Linux affected
Version Status Constraints
6.11 affected —
0 unaffected < 6.11
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc4 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/16cd66443957e4ad42155c6fec401012f600c6f8 cve-icon
https://git.kernel.org/stable/c/579faba5ede6df6b7f36777c431dc8dcf9d272e7 cve-icon
https://git.kernel.org/stable/c/8bc83f9ef6789571f399ff631a2a14a12b6d8585 cve-icon
https://git.kernel.org/stable/c/b11511006f9e17000de3f4cadee451364f658ca3 cve-icon
https://git.kernel.org/stable/c/ca58ad287bfc5b9d31a72ecb8650289df2b57250 cve-icon
History

Mon, 10 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev->lock for hci_conn lookup and hci_abort_conn(). Don't use RCU to ensure the conn is fully initialized at this point.
Title Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:04:11.543Z

Reserved: 2026-07-30T09:28:09.388Z

Link: CVE-2026-68392

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T16:15:04Z

Weaknesses