CVE-2026-68393

A flaw was found in the Bluetooth hci_sync component of the Linux kernel. This vulnerability arises from the incorrect handling of Read-Copy-Update (RCU) protected pointers outside their designated critical sections without proper reference counting. An attacker could exploit this by triggering a race condition, leading to a Use-After-Free (UAF) error. This could result in system instability, denial of service, or potentially the execution of arbitrary code.

This vulnerability is rated as having Moderate impact because triggering the race condition requires local access and precise execution timing during connection lookup operations in the Bluetooth subsystem. On standard Red Hat Enterprise Linux server installations, Bluetooth interfaces are generally unconfigured or absent, which substantially limits practical exposure. While the resulting use-after-free condition could destabilize the kernel or cause a denial of service, achieving arbitrary code execution is constrained by high attack complexity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.