GHSA-FG5W-G6PM-XP23高危未审查

无摘要

OSV 1.4.0 · unreviewed · 修改于 2026-08-29 17:30

发布时间

2026-08-28 17:31

GitHub 审查时间

—

NVD 发布时间

2026-08-28 16:16

源文件

advisories/unreviewed/2026/08/GHSA-fg5w-g6pm-xp23/GHSA-fg5w-g6pm-xp23.json

公告说明

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks

There is theoretical UAF if the conn is freed while the hci_sync task is running.

Hold refcount to avoid that.

受影响的软件包

该公告没有提供结构化的受影响软件包信息。

参考链接

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-80692

标识信息

别名 / CVE

CVE-2026-80692

CWE

无

软件生态

无

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

原始 OSV JSON

{
  "id": "GHSA-fg5w-g6pm-xp23",
  "aliases": [
    "CVE-2026-80692"
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks\n\nThere is theoretical UAF if the conn is freed while the hci_sync task\nis running.\n\nHold refcount to avoid that.",
  "affected": [],
  "modified": "2026-08-29T09:30:28Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
    }
  ],
  "published": "2026-08-28T09:31:49Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80692",
      "type": "ADVISORY"
    },
    {
      "url": "https://git.kernel.org/stable/c/2f5d635ad5906b0235bc0c870e8beba3116e1e98",
      "type": "WEB"
    },
    {
      "url": "https://git.kernel.org/stable/c/9a77f296aff4b2ca5f2928ab3a3220c82d8b4074",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": false,
    "nvd_published_at": "2026-08-28T08:16:54Z",
    "github_reviewed_at": null
  }
}