CVE-2026-74541

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. This vulnerability arises from the system's failure to properly clear iso_data when a connection is detached from its host controller connection (hcon). A local attacker could exploit this use-after-free condition to cause a denial of service or potentially achieve arbitrary code execution.

This vulnerability is rated Moderate impact because successful exploitation requires local unprivileged access on systems equipped with functional Bluetooth hardware to trigger the improper socket resource deallocation. Enterprise server deployments typically do not utilize Bluetooth controllers, significantly limiting general exposure across default environments. Although memory corruption could theoretically allow privilege escalation or cause a denial of service through a system crash, exploitation is constrained by complex timing requirements during connection termination.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.