CVE-2026-74509Published

Bluetooth: hci_sync: Fix advertising data UAFs

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-74509

Published

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "net/bluetooth/hci_sync.c"
                    ],
                    "versions": [
                        {
                            "version": "cba6b758711cab946c787f7c15be92cc749b8e1f",
                            "lessThan": "565971488191bf54a87a417abafab6ad0de72201",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "cba6b758711cab946c787f7c15be92cc749b8e1f",
                            "lessThan": "c4cec575a6d6f7c36808a3a0017b0675968bb06b",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "cba6b758711cab946c787f7c15be92cc749b8e1f",
                            "lessThan": "95cdcd8c82a501931fd3ae9b3811b0b6da167e94",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "cba6b758711cab946c787f7c15be92cc749b8e1f",
                            "lessThan": "eb1d8318764de7216e6dbba29a24d69f7ce51348",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "cba6b758711cab946c787f7c15be92cc749b8e1f",
                            "lessThan": "b16ebdbebd2d37f4cdc590bc3e9db71fe90350a3",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "cba6b758711cab946c787f7c15be92cc749b8e1f",
                            "lessThan": "cdc36db204ffd97b947d64374cf23a210dc74777",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "42fe380baaaccbe635c34ca07b29d19b9ec2498d",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "5.15.210",
                            "lessThan": "5.16",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                }

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "net/bluetooth/hci_sync.c"
                    ],
                    "versions": [
                        {
                            "version": "5.17",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "5.17",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.1.184",
                            "lessThanOrEqual": "6.1.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.6.154",
                            "lessThanOrEqual": "6.6.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.12.103",
                            "lessThanOrEqual": "6.12.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.18.44",
                            "lessThanOrEqual": "6.18.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.1.8",
                            "lessThanOrEqual": "7.1.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.2",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON