← CVE Intelligence

CVE-2026-68390

Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_params_lookup requires hdev->lock be held, otherwise the list iteration or param access is not safe. Hold hdev->lock for params lookups in hci_sync.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected c530569adc19b5f0c62955de41f067bad34e3fe0 before 8d892bec1dd134761cabec6ba23fe315d0f20f98; affected c530569adc19b5f0c62955de41f067bad34e3fe0 before c363202ec841df36421ec280eea3d5f94f556143
Linux / Linuxaffected 6.19; unaffected 0 before 6.19; unaffected 7.1.6 through 7.1.*; unaffected 7.2 through *

CWE

No CWE identifiers supplied.

References