In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
iso_connect_bis(), iso_connect_cis(), iso_listen_bis(), and iso_conn_big_sync() call hci_get_route() using iso_pi(sk)->dst, iso_pi(sk)->src, and iso_pi(sk)->src_type without holding lock_sock().
These fields may be modified concurrently by connect() or setsockopt() on the same socket, resulting in data-races reported by KCSAN.
Fix this by snapshotting the required fields under lock_sock() before calling hci_get_route().
BUG: KCSAN: data-race in memcmp+0x45/0xb0
race at unknown origin, with read to 0xffff8880122135cf of 1 bytes by task 333 on cpu 1: memcmp+0x45/0xb0 hci_get_route+0x27e/0x490 iso_connect_cis+0x4c/0xa10 iso_sock_connect+0x60e/0xb30 __sys_connect_file+0xbd/0xe0 __sys_connect+0xe0/0x110 __x64_sys_connect+0x40/0x50 x64_sys_call+0xcad/0x1c60 do_syscall_64+0x133/0x590 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 23, 2026 | Jul 19, 2026 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-oracle-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-gkeUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-oem-26.04bUpgrade linux-image-raspi-7.0Upgrade linux-image-genericUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-oracleUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-realtimeUpgrade linux-image-ibmUpgrade linux-image-virtual-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-bosUpgrade linux-image-azure-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-oem-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-realtime-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-oem-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-2018-nvidia-bos | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 5, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub