CVE-2026-98293

CVE-2026-98293

published October 6, 2026

CVSS
—
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()

iso_get_sock() returns the parent socket with a reference held, which is

dropped by sock_put() once the child socket has been set up. The error

path taken when iso_sock_alloc() fails only calls release_sock() and

returns, leaking the reference and thus the parent socket itself.

Drop the reference on that path as well.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.7th percentile
Published
2026-10-06T13:18Z
References (5)
EPSS history
Timeline
  • 07 OCT 03:43Z
    EPSS moved — → 0%
    epss
  • 06 OCT 08:45Z
    Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()
    cvelistv5