Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso_sock_rebind_bc(), the bis pointer is cached, then the socket lock is dropped: bis = iso_pi(sk)->conn->hcon; /* Release the socket before lookups since that requires hci_dev_lock * which shall not be acquired while holding sock_lock for proper * ordering. */ release_sock(sk); hci_dev_lock(bis->hdev); During the unlocked window, could a concurrent close() destroy the connection and free the bis structure, causing hci_dev_lock(bis->hdev) to access memory after it is freed, fix this by using the hdev reference which was safely acquired via iso_conn_get_hdev().
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-53276) https://vuldb.com/vuln/373831
Post summary
The post announces emergence of a new high‑severity Linux Kernel vulnerability (CVE-2026-53276) with no further technical or exploit details.
🚨*CVE* CVE-2026-53276 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso_sock_rebind_bc(), the bis po… https://www.cve.org/CVERecord?id=CVE-2026-53276 ----- Traducción: CVE-2026-53276 En … http://infoflow.cloud`
Post summary
The tweet announces that CVE-2026‑53276, a use‑after‑free in the Linux Bluetooth ISO stack, has been resolved in the kernel, but it gives no proof‑of‑concept, exploit code, or detailed patch instructions.
CVE-2026-53276 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer In iso_sock_rebind_bc(), the bis po… https://www.cve.org/CVERecord?id=CVE-2026-53276
Post summary
The Linux kernel’s Bluetooth ISO component vulnerability (CVE-2026-53276) involving a use‑after‑free of hci_conn has been fixed, with no PoC, exploit, or active exploitation reported.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.1 | - | - |
| OS | linux | linux_kernel | 7.1 | - | - |
| OS | linux | linux_kernel | 7.1 | - | - |
| OS | linux | linux_kernel | 7.1 | - | - |
| OS | linux | linux_kernel | 7.1 | - | - |
| OS | linux | linux_kernel | 7.1 | - | - |