CVE-2026-43023 is a race condition vulnerability in the Linux kernel's Bluetooth SCO socket connection code. The flaw arises because sco_sock_connect() checks socket state and type without holding the socket lock, allowing concurrent connect() calls to cause use-after-free and resource leaks. The issue was confirmed with detailed logging and involves complex interactions between threads manipulating socket and connection states. The fix involves proper locking, state re-checks, and connection management to prevent double attachments and leaks.