Answer in brief
CVE-2026-68392 records a Unknown severity vulnerability in Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=249c88e7fb45b6b705040c5af4bd0d0f2bc9735c <8bc83f9ef6789571f399ff631a2a14a12b6d8585 || >=227a0cdf4a028a73dc256d0f5144b4808d718893 <579faba5ede6df6b7f36777c431dc8dcf9d272e7 || >=227a0cdf4a028a73dc256d0f5144b4808d718893 <ca58ad287bfc5b9d31a72ecb8650289df2b57250 || >=227a0cdf4a028a73dc256d0f5144b4808d718893 <b11511006f9e17000de3f4cadee451364f658ca3 || >=227a0cdf4a028a73dc256d0f5144b4808d718893 <16cd66443957e4ad42155c6fec401012f600c6f8 || 58afdc9b18871eb1d461c725be9e9f3f44a39aeb || >=6.6.51 <6.6.148 || >=6.10.10 <6.11 | 8bc83f9ef6789571f399ff631a2a14a12b6d8585, 579faba5ede6df6b7f36777c431dc8dcf9d272e7, ca58ad287bfc5b9d31a72ecb8650289df2b57250, b11511006f9e17000de3f4cadee451364f658ca3, 16cd66443957e4ad42155c6fec401012f600c6f8, 6.6.148, 6.11 |
| Linux/Linuxgeneric | 6.11 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev->lock for hci_conn lookup and hci_abort_conn(). Don't use RCU to ensure the conn is fully initialized at this point.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68392 records a Unknown severity vulnerability in Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=249c88e7fb45b6b705040c5af4bd0d0f2bc9735c <8bc83f9ef6789571f399ff631a2a14a12b6d8585 || >=227a0cdf4a028a73dc256d0f5144b4808d718893 <579faba5ede6df6b7f36777c431dc8dcf9d272e7 || >=227a0cdf4a028a73dc256d0f5144b4808d718893 <ca58ad287bfc5b9d31a72ecb8650289df2b57250 || >=227a0cdf4a028a73dc256d0f5144b4808d718893 <b11511006f9e17000de3f4cadee451364f658ca3 || >=227a0cdf4a028a73dc256d0f5144b4808d718893 <16cd66443957e4ad42155c6fec401012f600c6f8 || 58afdc9b18871eb1d461c725be9e9f3f44a39aeb || >=6.6.51 <6.6.148 || >=6.10.10 <6.11 | 8bc83f9ef6789571f399ff631a2a14a12b6d8585, 579faba5ede6df6b7f36777c431dc8dcf9d272e7, ca58ad287bfc5b9d31a72ecb8650289df2b57250, b11511006f9e17000de3f4cadee451364f658ca3, 16cd66443957e4ad42155c6fec401012f600c6f8, 6.6.148, 6.11 |
| Linux/Linuxgeneric | 6.11 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev->lock for hci_conn lookup and hci_abort_conn(). Don't use RCU to ensure the conn is fully initialized at this point.
Quoted source text, attributed separately from HOL analysis.