SECURITY ANNOUNCEMENT

CVE-2026-99011

23 October 2026

sco_conn no longer owns an hci_conn reference, so sco_conn_add() stops consuming one and sco_connect() drops the hci_connect_sco() reference on every path; sco_connect_cfm() no longer needs its hci_conn_hold() dance.

Introduced

6.13e6720779ae612a14ac4ba7fe4fd5b27d900d932c

Fixed releases

6.18.57b108ea7ebba147465f4158d8133f0e8f013762ed

7.2.118a98d58f6cfe70d51138cd9ce894e72671d95f8a

7.3816fb1590a4c8cf8d05cd076057616be02e276f0

View source announcement ↗