一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-74530 [HIGH] – In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync:

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback

There is theoretical UAF if the conn is freed while the hci_sync task is
running.

Hold refcount to avoid that. Handle NULL hcon, return 0 + do nothing to
match the previous behavior.