CVE-2026-68392

A flaw was found in the Linux kernel's Bluetooth management subsystem. This vulnerability occurs due to incorrect locking when handling memory pointers during device unpairing and disconnection. An attacker could exploit this to trigger a Use-After-Free (UAF) condition, which is a type of memory corruption that may lead to system instability or other impacts.

This issue affects Bluetooth management (mgmt). unpair_device/disconnect_sync dereferenced RCU-protected hci_conn outside critical sections, risking UAF. Systems without Bluetooth are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.