Strix
26.1K

CVE-2026-68390

Unknown

Last modified

CVE-2026-68390 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_params_lookup requires hdev->lock be held, otherwise the list iteration or param access is not safe. Hold hdev->lock for params lookups in hci_sync..

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_params_lookup requires hdev->lock be held, otherwise the list iteration or param access is not safe. Hold hdev->lock for params lookups in hci_sync.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= c530569adc19b5f0c62955de41f067bad34e3fe0, < 8d892bec1dd134761cabec6ba23fe315d0f20f98; >= c530569adc19b5f0c62955de41f067bad34e3fe0, < c363202ec841df36421ec280eea3d5f94f556143
LinuxLinux6.19

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68390?
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_params_lookup requires hdev->lock be held, otherwise the list iteration or param access is not safe. Hold hdev->lock for params lookups in hci_sync.
How severe is CVE-2026-68390?
Severity scoring for CVE-2026-68390 is pending analysis.
How do I fix CVE-2026-68390?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68390?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST