Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
Permalink CVE-2026-74531
created 3 weeks, 4 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion 3 weeks, 4 days ago
Bluetooth: hci_conn: hold conn reference in abort_conn_sync()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn reference in abort_conn_sync() There is theoretical UAF if the conn is freed while the hci_sync task is running. Hold refcount to avoid that.

Affected products

Linux
  • <e8f9fef362bab431d95371d3406bc720350290c3
  • <fa812cfa81aa3d4a7b6ce8277979af57b3f79712
  • =<6.6.*
  • =<*
  • <5761d003daa987ac81463f570713ce9c9dd204e5
  • <6.11
  • <6.6.151
  • <6.11
  • <64d1645f26aa49b5a86ba2fccd0bb6749ea725a6
  • =<6.12.*
  • =<6.18.*
  • =<7.1.*
  • ==58afdc9b18871eb1d461c725be9e9f3f44a39aeb
  • ==6.11
  • <963fb4b8e7d1ab07b4ae45bf15d41e667c88caca