CVE-2026-74302

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Bluetooth: hci_core: Fix UAF in hci_unregister_dev()<br /> <br /> hci_unregister_dev() does not disable cmd_timer and ncmd_timer<br /> before the hci_dev structure is freed. If a timeout fires<br /> during device teardown, the callback dereferences freed memory<br /> (including the hdev-&gt;reset function pointer), leading to a<br /> use-after-free.<br /> <br /> Add disable_delayed_work_sync() calls alongside the existing<br /> disable_work_sync() calls to ensure both timers are fully<br /> quiesced before teardown proceeds.