CVE-2026-68189

A flaw was found in the Bluetooth hci_sync component of the Linux kernel. A race condition during the UUID list traversal, caused by improper synchronization between asynchronous command sync work and UUID list updates, can lead to a use-after-free vulnerability. This could allow a local attacker to potentially cause a denial of service or achieve arbitrary code execution.

This vulnerability is rated as Moderate because exploitation requires local access and concurrent manipulation of Bluetooth management sockets on systems where the Bluetooth stack is active. In typical enterprise and cloud deployments, Bluetooth hardware and services are absent or unused, which significantly restricts the real-world attack surface. A successful race condition triggers a use-after-free flaw that primarily leads to a system crash and denial of service, though local privilege escalation cannot be completely ruled out.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.