SB2026090605 - Use of uninitialized resource in Linux kernel bluetooth

Description

This security bulletin contains information about 1 vulnerability.

1) Use of uninitialized resource (CVE-ID: CVE-2026-80761)

CWE-ID: CWE-908 - Use of Uninitialized Resource

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to use of uninitialized stack memory in the Bluetooth ISO socket getname handler when returning socket address information through getsockname(2) or getpeername(2). A local user can open a BTPROTO_ISO socket and invoke getsockname(2) to disclose sensitive information.

The larger disclosure involving broadcast-peer address fields requires an established BIS or PA connection.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/190b719b787eb4ca6c25b12fab224806f9108b06
• https://git.kernel.org/stable/c/1f6d1f2611af0eb36b133a41d29ffd2cc2601615
• https://git.kernel.org/stable/c/884cf2cc957da7ac178a0e6c6c69ddfec0481cc8
• https://git.kernel.org/stable/c/9069be87c67f290783b332c4284e09fb89cb9ea7