Threats tagged 'ghsa-4f56-g5vg-w2cg'

CVE-2026-74537 is a high-severity vulnerability in the Linux kernel's Bluetooth ISO subsystem. It involves improper handling of socket references in the iso_conn_ready function, leading to a use-after-free (UAF) condition. The flaw arises because the socket (sk) is accessed without proper locking or reference counting, allowing concurrent closure and potential memory corruption. The vulnerability has been addressed by ensuring the socket reference count is held properly and verifying socket validity after locking.