Description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
hci_conn lookup and field access must be covered by hdev lock in
set_cig_params_sync, otherwise it's possible it is freed concurrently.
Take hdev lock to prevent hci_conn from being deleted or modified
concurrently. Just RCU lock is not suitable here, as we also want to
avoid "tearing" in the configuration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.4.16 – < 6.5, 6.5.3 – < 6.6, 6.6 | 6.5 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.19.12-1 | — |
| Debian 13 | linux | 6.12.85-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1028.33 | — |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1006.6 | — |
| Ubuntu 25.10 | linux +8 | No fix yet | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-136.136 | USN-8567-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1061.64 | USN-8595-2 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1063.71 | USN-8606-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1062.69 | USN-8607-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1064.72 | USN-8567-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1059.67 | USN-8567-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1046.50 | USN-8567-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1061.62 | USN-8574-3 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-136.136.2 | USN-8574-2 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1059.62 | USN-8596-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1059.62.1 | USN-8596-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1030.31 | USN-8574-3 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1058.61 | USN-8574-2 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1061.65 | USN-8665-1 |
| Ubuntu 24.04 LTS | linux-riscv +27 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-vmware | 6.8.0-1008.8 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1033.34 | USN-8574-3 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1061.64~22.04.1 | USN-8595-3 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1063.71~22.04.1 | USN-8606-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1062.69~22.04.1 | USN-8609-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1064.72~22.04.1 | USN-8567-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-136.136~22.04.1 | USN-8619-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1061.62~22.04.1 | USN-8574-3 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-136.136.2~22.04.1 | USN-8574-2 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1059.62~22.04.1 | USN-8596-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1058.61~22.04.1 | USN-8595-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-136.136~22.04.3 | — |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2050.52 | USN-8665-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1056.57 | USN-8567-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 +1 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1056.57~22.04.2 | USN-8567-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1061.64+fips1 | USN-8595-3 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1063.71+fips2 | USN-8608-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-136.136+fips2 | USN-8574-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1064.72+fips1 | USN-8574-1 |
| Ubuntu Pro 26.04 LTS | linux | 7.0.0-30.30 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-aws | 7.0.0-1011.11 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-azure | 7.0.0-1012.12 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-gcp | 7.0.0-1010.10 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux | 6.8.0-142.142 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-aws | 6.8.0-1065.68 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-azure | 6.8.0-1068.76 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-gcp | 6.8.0-1069.77 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-gke | 6.8.0-1064.72 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-ibm | 6.8.0-1065.66 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-oracle | 6.8.0-1062.65 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux | 5.15.0-202.212 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-aws | 5.15.0-1119.126 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-aws-6.8 | 6.8.0-1065.68~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-azure | 5.15.0-1125.134 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp | 5.15.0-1120.130 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp-6.8 | 6.8.0-1069.77~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gke | 5.15.0-1115.121 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-hwe-6.8 | 6.8.0-149.149~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm | 5.15.0-1113.117 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm-6.8 | 6.8.0-1066.67~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-lowlatency | 5.15.0-197.207 | LSN-0122-1 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-245.265 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-260.272 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1197.210 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1207.222 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1190.207 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-245.265~18.04.1 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1160.171 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-291.325 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1200.215 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1197.210~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1208.223~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1190.207~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-260.272~16.04.2 | LSN-0122-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +4 | 6.4.0-150700.53.73.2 | SUSE-SU-2026:3166-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.73.2.150700.17.41.4 | SUSE-SU-2026:3166-1 |
| SLES 15 SP7 | kernel-docs +2 | 6.4.0-150700.53.73.1 | SUSE-SU-2026:3166-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.37.1 | SUSE-SU-2026:23237-1, SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23068-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.37.1 | SUSE-SU-2026:23068-1, SUSE-SU-2026:23066-1 |
| SLE Micro 6.1 | kernel-rt +2 | 6.4.0-50.1 | SUSE-SU-2026:22904-1, SUSE-SU-2026:22903-1 |
| SLE Micro 6.1 | kernel-source +1 | 6.4.0-50.2 | SUSE-SU-2026:22904-1, SUSE-SU-2026:22903-1 |
| SLE Micro 6.0 | kernel-rt +2 | 6.4.0-50.1 | SUSE-SU-2026:22810-1, SUSE-SU-2026:22809-1 |
| SLE Micro 6.0 | kernel-source +1 | 6.4.0-50.2 | SUSE-SU-2026:22810-1, SUSE-SU-2026:22809-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.73.2 | SUSE-SU-2026:3166-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_18 | 1-150700.1.5.1 | SUSE-SU-2026:3130-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_19 | 1-150700.15.3.4 | SUSE-SU-2026:3166-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.67.1 | SUSE-SU-2026:3130-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | openSUSE-SU-2026:21555-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.37.1 | openSUSE-SU-2026:21555-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.143.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-204.92.4.2.el10uek | ELSA-2026-50372 |
Advisories 29
- LSN-0122-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2026-1346 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8574-3 linux-ibm, linux-ibm-6.8, linux-nvidia-tegra, linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8595-3 linux-aws-6.8, linux-aws-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8574-2 linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8596-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8665-1 linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8608-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8574-1 linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8595-2 linux-aws vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8595-1 linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8567-1 linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8606-1 linux-azure, linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8607-1 linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8619-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8609-1 linux-azure-fde-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- SUSE-SU-2026:23231-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23237-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23221-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 27, 2026
- SUSE-SU-2026:23066-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 15, 2026
- SUSE-SU-2026:23068-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 15, 2026
- openSUSE-SU-2026:21555-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Aug 12, 2026
- SUSE-SU-2026:22903-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 28, 2026
- SUSE-SU-2026:22904-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 28, 2026
- SUSE-SU-2026:22809-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 28, 2026
- SUSE-SU-2026:22810-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 28, 2026
- SUSE-SU-2026:3166-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 22, 2026
- SUSE-SU-2026:3130-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 21, 2026
- ELSA-2026-50372 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 2, 2026
References
- https://git.kernel.org/stable/c/7502c1cf303b69f71d085f5ff7251b0e1b0f09df
- https://git.kernel.org/stable/c/66d432e9b45bae7881ffcdb12cd8fd0bf254ef02
- https://git.kernel.org/stable/c/7d568fede8eac91161a60b710aa920abe9b0fb9f
- https://git.kernel.org/stable/c/bad65b4b0a96139f023eadc28a33125963208449
- https://git.kernel.org/stable/c/a2639a7f0f5bf7d73f337f8f077c19415c62ed2c