Няма оценка
CVSS
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when iso_sock_alloc() fails only calls release_sock() and returns, leaking the reference and thus the parent socket itself. Drop the reference on that path as well.
Засегнати продукти
- Linux Linux: 11dc486ed5d4626e6b92a23b67ed76cb6c48bfc9 преди ea8a262662be62c095789924c11722ecbf40a4de; fa224d0c094a458e9ebf5ea9b1c696136b7af427 преди 9228f87365e68a6cae191f57f456e89a6d2167cf; fa224d0c094a458e9ebf5ea9b1c696136b7af427 преди e2b156a8d25966be49c1f809b654a2c4bb16564d; fa224d0c094a458e9ebf5ea9b1c696136b7af427 преди f016daabd4fec4e9b8563f8b6f42eabce0ca66b0; fa224d0c094a458e9ebf5ea9b1c696136b7af427 преди ca18ee413a7cb6f09885778039225e58bae0d607; 6.6.67 преди 6.6.158
- Linux Linux: 6.8; преди 6.8; 6.6.158 до 6.6.*; 6.12.112 до 6.12.*; 6.18.54 до 6.18.*; 7.2.8 до 7.2.*; от 7.3 нататък
История
- 6 октомври 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-98293
- https://nvd.nist.gov/vuln/detail/CVE-2026-98293
- https://git.kernel.org/stable/c/ea8a262662be62c095789924c11722ecbf40a4de
- https://git.kernel.org/stable/c/9228f87365e68a6cae191f57f456e89a6d2167cf
- https://git.kernel.org/stable/c/e2b156a8d25966be49c1f809b654a2c4bb16564d
- https://git.kernel.org/stable/c/f016daabd4fec4e9b8563f8b6f42eabce0ca66b0
- https://git.kernel.org/stable/c/ca18ee413a7cb6f09885778039225e58bae0d607