Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks There is… (CVE-2026-80692)

CVE-2026-80692 addresses a use-after-free vulnerability in the Linux kernel's Bluetooth hci_sync component. Specifically, the vulnerability occurs in the hci_connect_acl and le_sync callbacks where the connection object (conn) could be freed while the hci_sync task is still running, leading to a potential use-after-free condition. The resolution involves holding a reference count on the connection object to prevent it from being freed prematurely during these callbacks.

If exploited, this vulnerability could allow an attacker with network access to the Bluetooth interface to cause a use-after-free condition, potentially leading to arbitrary code execution or denial of service. The CVSS score of 8.8 indicates high severity with high impact on confidentiality, integrity, and availability. However, no known exploits are reported in the wild at this time.

The vulnerability has been resolved in the Linux kernel. Users should apply the official kernel updates or patches provided by their Linux distribution to mitigate this issue. Since no patch links are provided here, users should consult their vendor or distribution security advisories for the relevant updates. No additional mitigation steps are indicated.