CVE-2026-68390

A flaw was found in the Linux kernel's Bluetooth subsystem, specifically within the hci_sync component. This vulnerability occurs because the hci_conn_params_lookup function does not properly hold a necessary lock (hdev->lock) during operations. This oversight can lead to unsafe list iterations or parameter access, potentially resulting in data corruption or system instability.

This vulnerability is rated as Moderate severity for Red Hat products because triggering the concurrency flaw requires local access under strict timing conditions while Bluetooth hardware is actively operating. Standard server installations generally do not configure or expose Bluetooth controllers, substantially mitigating practical exposure. In addition, earlier enterprise kernel versions do not carry the vulnerable subsystem changes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.