SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80721

HIGH · CVSS 8.8 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's Bluetooth subsystem, specifically in the handling of ISO connections where dangling hcon references may occur after the deletion of an ISO connection. This flaw could lead to potential race conditions, resulting in undefined behavior or system instability. Organizations utilizing Linux systems with Bluetooth capabilities should prioritize addressing this issue to mitigate risks associated with unreliable connection handling.

CVE
CVE-2026-80721
Severity
HIGH
CVSS
8.8
EPSS
0.22%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in iso_conn After iso_conn_del(), ISO sockets should not dereference the hcon any more. Currently, clearing iso_conn::hcon relies on iso_conn_del() releasing the last reference to the iso_conn. Simplify this by explicitly clearing conn->hcon in iso_conn_del(), to avoid more complex reasoning on races about who holds the last reference.