Search: CVE-2026-43023

CVE-2026-43023 is a race condition vulnerability in the Linux kernel's Bluetooth SCO socket connection function (sco_sock_connect()). It arises from concurrent connect() syscalls on the same socket without proper locking, leading to use-after-free and resource leaks. The flaw was fixed by introducing proper locking and state checks to serialize connection attempts and prevent double attachment and leaks.