Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-31408 · Microsoft / collected KEV context

cve-program · CVE-2026-31408

• https://git.kernel.org/stable/c/37e18bc8c9a70d77bd099e2273f328b3bc7f6d0d
• https://git.kernel.org/stable/c/d57384e27d1ebf0047e3f00a6e1181b8be9857a2
• https://git.kernel.org/stable/c/b0a7da0e3f7442545f071499beb36374714bb9de
• https://git.kernel.org/stable/c/45aaca995e4a7a05b272a58e7ab2fff4f611b8f1
• https://git.kernel.org/stable/c/108b81514d8f2535eb16651495cefb2250528db3
• https://git.kernel.org/stable/c/7197462e90b8ce15caa1ae15d4bc2bb8cd21b11e
• https://git.kernel.org/stable/c/e76e8f0581ef555eacc11dbb095e602fb30a5361
• https://git.kernel.org/stable/c/598dbba9919c5e36c54fe1709b557d64120cb94b

No related operational record is retained in the current change model.