8.8

CVE-2026-64408

Bluetooth: bnep: pin L2CAP connection during netdev registration

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bnep: pin L2CAP connection during netdev registration

bnep_add_connection() reads the L2CAP connection without holding the
channel lock, then passes its HCI device to register_netdev(). Controller
teardown can clear and release that connection concurrently, leaving the
network device registration path to dereference a freed parent device.

Take a reference to the L2CAP connection while holding the channel lock.
Retain it until register_netdev() has taken the parent device reference.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.13 < 5.10.261
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.212
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.178
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.145
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.96
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.39
Linux ≫ Linux Kernel Version >= 6.19 < 7.1.4
Linux ≫ Linux Kernel Version 7.2 Update rc1
Linux ≫ Linux Kernel Version 7.2 Update rc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.179
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/390b5db3ff8745187f094c4e915663b7b1f98944
Patch
https://git.kernel.org/stable/c/46a88784c4c9b96954dd86f747ce93f65efa1302
Patch
https://git.kernel.org/stable/c/551ae773ec64045b4e72099132654887e0270bcc
Patch
https://git.kernel.org/stable/c/ae215c5b6422d8eda443b861b124bd1be6969c31
Patch
https://git.kernel.org/stable/c/df22adc7eafc22e651561813c11dc51a796b12ee
Patch
https://git.kernel.org/stable/c/a6b22dbd80926556290ad2243be25218d6956a19
Patch
https://git.kernel.org/stable/c/563a8573047182f550b1e1e030615755cd8c41da
Patch
https://git.kernel.org/stable/c/bb067a99a0356196c0b89a95721985485ebce5a5
Patch