CVE-2026-53276

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. A local attacker with the ability to perform Bluetooth ISO socket operations could exploit a use-after-free vulnerability during a socket rebind operation. This occurs due to a race condition where a connection object's memory can be freed while still being referenced, leading to a kernel crash and a local denial of service. In some scenarios, this could potentially lead to information disclosure or integrity impacts.

This vulnerability is rated as Moderate severity because exploitation requires authenticated local access and relies on winning a race condition during concurrent socket operations. While successful exploitation of the memory corruption could cause a kernel denial of service or unauthorized privilege escalation, standard Red Hat Enterprise Linux server installations rarely enable or utilize Bluetooth interfaces, limiting practical exposure. Systems that do not actively manage Bluetooth devices or instantiate ISO sockets are not exposed to this flaw during normal operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.