7.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev->lock for hci_conn lookup and hci_abort_conn(). Don't use RCU to ensure the conn is fully initialized at this point.
Засегнати продукти
- Linux Linux: 7fe4d391e937c2f048a43ff4b421e677f10d83c0 преди 74f3e6e21ebc6c418d348f8ce68aef6fe6d82c82; 249c88e7fb45b6b705040c5af4bd0d0f2bc9735c преди 8bc83f9ef6789571f399ff631a2a14a12b6d8585; 227a0cdf4a028a73dc256d0f5144b4808d718893 преди 579faba5ede6df6b7f36777c431dc8dcf9d272e7; 227a0cdf4a028a73dc256d0f5144b4808d718893 преди ca58ad287bfc5b9d31a72ecb8650289df2b57250; 227a0cdf4a028a73dc256d0f5144b4808d718893 преди b11511006f9e17000de3f4cadee451364f658ca3; 227a0cdf4a028a73dc256d0f5144b4808d718893 преди 16cd66443957e4ad42155c6fec401012f600c6f8; 58afdc9b18871eb1d461c725be9e9f3f44a39aeb; 6.6.51 преди 6.6.148; 6.10.10 преди 6.11
- Linux Linux: 6.11; преди 6.11; 6.6.148 до 6.6.*; 6.12.101 до 6.12.*; 6.18.42 до 6.18.*; 7.1.6 до 7.1.*; от 7.2 нататък
История
- 10 август 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-68392
- https://nvd.nist.gov/vuln/detail/CVE-2026-68392
- https://git.kernel.org/stable/c/74f3e6e21ebc6c418d348f8ce68aef6fe6d82c82
- https://git.kernel.org/stable/c/8bc83f9ef6789571f399ff631a2a14a12b6d8585
- https://git.kernel.org/stable/c/579faba5ede6df6b7f36777c431dc8dcf9d272e7
- https://git.kernel.org/stable/c/ca58ad287bfc5b9d31a72ecb8650289df2b57250
- https://git.kernel.org/stable/c/b11511006f9e17000de3f4cadee451364f658ca3
- https://git.kernel.org/stable/c/16cd66443957e4ad42155c6fec401012f600c6f8