CVE-2026-63945

A flaw was found in the Linux kernel's Bluetooth ISO (Isochronous Stream) subsystem. A race condition exists where the iso_sock_clear_timer() function can access connection data without proper locking, while another function, iso_conn_del(), concurrently modifies the same data. This can lead to a NULL pointer dereference or use-after-free, which may cause a system crash and result in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.