CVE-2026-64404

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition exists in the iso_conn_big_sync() function where a socket lock is temporarily released and re-acquired. During this window, the Bluetooth connection can be unexpectedly terminated. If the connection is torn down, the subsequent attempt to access connection details can lead to a null pointer dereference, causing the system to crash. This vulnerability can result in a Denial of Service (DoS) for an affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.