CVE-2026-80914 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution maintainers, system administrators responsible for Linux systems, security teams monitoring Linux kernel vulnerabilities

Why it matters

CVE-2026-80914 is a high-severity use-after-free vulnerability in the Linux kernel's Bluetooth ISO subsystem. Defenders should verify exposure, prioritize patching, and mitigate potential disruptions.

• Verification of Linux kernel versions and patch levels is necessary to determine exposure.
• Exploitation of this vulnerability could lead to system crashes or potential code execution.
• Defenders should prioritize patching or mitigating this vulnerability to prevent potential disruptions.
• Remediation requires updating affected Linux kernel versions with the provided patches.

Technical summary

The `iso_conn_ready` function in the Linux kernel's Bluetooth ISO subsystem does not properly handle the case where the listener socket is closed concurrently. It takes a reference to the listener socket using `iso_get_sock`, but does not re-check its state before creating a child socket. If the listener socket is closed and freed between these steps, the child socket will reference a dangling pointer, leading to a use-after-free error when the child socket is later disconnected.

Defensive priority

High

Recommended defensive actions

• Review and apply the relevant Linux kernel patches to address the use-after-free vulnerability in the Bluetooth ISO subsystem.
• Ensure that systems with Linux kernel versions affected by this vulnerability are updated with the latest security patches.
• Monitor Linux kernel subsystem updates for any additional information or patches related to this vulnerability.
• Perform a thorough review of the Linux kernel version used in your environment to determine exposure.
• Prioritize patching or mitigating this vulnerability to prevent potential disruptions.
• Verify the integrity of the Linux kernel's Bluetooth ISO subsystem configuration.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The vulnerability was resolved in the Linux kernel through a series of commits addressing the use-after-free issue in the Bluetooth ISO subsystem. Official references are available from the Linux kernel Git repository.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.