CVE-2026-98293: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a reference held, which is dropped by sock_put() once the child socket has been set up. The error path taken when iso_sock_alloc() fails only calls release_sock() and returns, leaking the reference and thus the parent socket itself. Drop the reference on that path as well.

Affected products

• Linux Linux: from 6.6.67, before 6.6.158 (fixed in 6.6.158); from 6.8, before 6.12.112 (fixed in 6.12.112); from 6.13, before 6.18.54 (fixed in 6.18.54); from 6.19, before 7.2.8 (fixed in 7.2.8)

Published 2026-10-06. Last modified 2026-10-06.