CVE-2026-98293

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when iso_sock_alloc() fails only calls release_sock() and returns, leaking the reference and thus the parent socket itself. Drop the reference on that path as well.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-25)

Published

2026-10-06

Modified

2026-10-19

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/9228f87365e68a6cae191f57f456e89a6d2167cf
• https://git.kernel.org/stable/c/ca18ee413a7cb6f09885778039225e58bae0d607
• https://git.kernel.org/stable/c/e2b156a8d25966be49c1f809b654a2c4bb16564d
• https://git.kernel.org/stable/c/ea8a262662be62c095789924c11722ecbf40a4de
• https://git.kernel.org/stable/c/f016daabd4fec4e9b8563f8b6f42eabce0ca66b0

Check your stackJSON