SB2026102229 - Improper update of reference count in Linux kernel bluetooth

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026102229

SB2026102229 - Improper update of reference count in Linux kernel bluetooth

Published: October 22, 2026

Security Bulletin ID SB2026102229
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper update of reference count (CVE-ID: CVE-2026-98459)

CWE-ID: CWE-911 - Improper Update of Reference Count

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to potentially cause a denial of service by prematurely disconnecting a Bluetooth connection that is still in use.

The vulnerability exists due to improper reference counting in the Linux kernel Bluetooth ISO hci_bind_bis() function when linking an additional broadcast isochronous stream to an existing parent connection. A local user can trigger linking and subsequent unlinking of the child connection to drop the parent's existing operational hold, potentially scheduling the parent for disconnection while its socket is still using it.


Remediation

Install update from vendor's website.

References