CVE-2026-68390 PUBLISHED

Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups

hci_conn_params_lookup requires hdev->lock be held, otherwise the list iteration or param access is not safe.

Hold hdev->lock for params lookups in hci_sync.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from c530569adc19b5f0c62955de41f067bad34e3fe0 to 8d892bec1dd134761cabec6ba23fe315d0f20f98 (excl.)
  • affected from c530569adc19b5f0c62955de41f067bad34e3fe0 to c363202ec841df36421ec280eea3d5f94f556143 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.19 is affected
  • unaffected from 0 to 6.19 (excl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc4 to * (incl.)

References