CVE-2026-98293

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when iso_sock_alloc() fails only calls release_sock() and returns, leaking the reference and thus the parent socket itself. Drop the reference on that path as well.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-10-06 09:18:19.727000

Last modified

2026-10-19 10:18:31.057000

View original CVE JSON

{
  "id": "CVE-2026-98293",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-10-06T09:18:19.727",
  "lastModified": "2026-10-19T10:18:31.057",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: Fix parent socket leak in iso_conn_ready()\n\niso_get_sock() returns the parent socket with a reference held, which is\ndropped by sock_put() once the child socket has been set up. The error\npath taken when iso_sock_alloc() fails only calls release_sock() and\nreturns, leaking the reference and thus the parent socket itself.\n\nDrop the reference on that path as well."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "net/bluetooth/iso.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "11dc486ed5d4626e6b92a23b67ed76cb6c48bfc9",
              "lessThan": "ea8a262662be62c095789924c11722ecbf40a4de",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "fa224d0c094a458e9ebf5ea9b1c696136b7af427",
              "lessThan": "9228f87365e68a6cae191f57f456e89a6d2167cf",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "fa224d0c094a458e9ebf5ea9b1c696136b7af427",
              "lessThan": "e2b156a8d25966be49c1f809b654a2c4bb16564d",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "fa224d0c094a458e9ebf5ea9b1c696136b7af427",
              "lessThan": "f016daabd4fec4e9b8563f8b6f42eabce0ca66b0",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "fa224d0c094a458e9ebf5ea9b1c696136b7af427",
              "lessThan": "ca18ee413a7cb6f09885778039225e58bae0d607",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "6.6.67",
              "lessThan": "6.6.158",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "net/bluetooth/iso.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.8",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.8",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.158",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.112",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.54",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.8",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/9228f87365e68a6cae191f57f456e89a6d2167cf",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ca18ee413a7cb6f09885778039225e58bae0d607",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e2b156a8d25966be49c1f809b654a2c4bb16564d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ea8a262662be62c095789924c11722ecbf40a4de",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f016daabd4fec4e9b8563f8b6f42eabce0ca66b0",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}