In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: fix UAF in iso_recv_frame
iso_recv_frame reads conn->sk under iso_conn_lock but releases the lock before using sk, with no reference held. A concurrent iso_sock_kill() can free sk in that window, causing use-after-free on sk->sk_state and sock_queue_rcv_skb().
Fix by replacing the bare pointer read with iso_sock_hold(conn), which calls sock_hold() while the spinlock is held, atomically elevating the refcount before the lock drops. Add a drop_put label so sock_put() is called on all exit paths where the hold succeeded.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 20, 2026 | Jul 20, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 10, 2026 | Jul 19, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade libperf | Sep 15, 2026 | Sep 10, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-gcpUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub