CVE-2026-64408

🗓️ 25 Jul 2026 08:50:49Reported by LinuxType

Linux kernel Bluetooth bnep fix pins L2CAP during netdev registration to avoid use after free.

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2026-64408 Bluetooth: bnep: pin L2CAP connection during netdev registration	25 Jul 202608:50	–	cvelist
Debian CVE	CVE-2026-64408	25 Jul 202608:50	–	debiancve
EUVD	EUVD-2026-48952	25 Jul 202608:50	–	euvd
NVD	CVE-2026-64408	25 Jul 202610:17	–	nvd
OSV	DEBIAN-CVE-2026-64408	25 Jul 202616:48	–	osv
Positive Technologies	PT-2026-64629	25 Jul 202600:00	–	ptsecurity

Vulners

CNA

Node

linux linux_kernelRange3.13–5.10.261

linux linux_kernelRange5.11.0–5.15.212

linux linux_kernelRange5.16.0–6.1.178

linux linux_kernelRange6.2.0–6.6.145

linux linux_kernelRange6.7.0–6.12.96

linux linux_kernelRange6.13.0–6.18.39

linux linux_kernelRange6.19.0–7.1.4

linux linux_kernelRange7.2.0–7.2-rc3

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/bluetooth/bnep/core.c"
    ],
    "versions": [
      {
        "version": "65f53e9802dbfae0e5758a91793c3f5f8bece49b",
        "lessThan": "390b5db3ff8745187f094c4e915663b7b1f98944",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "65f53e9802dbfae0e5758a91793c3f5f8bece49b",
        "lessThan": "46a88784c4c9b96954dd86f747ce93f65efa1302",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "65f53e9802dbfae0e5758a91793c3f5f8bece49b",
        "lessThan": "551ae773ec64045b4e72099132654887e0270bcc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "65f53e9802dbfae0e5758a91793c3f5f8bece49b",
        "lessThan": "ae215c5b6422d8eda443b861b124bd1be6969c31",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "65f53e9802dbfae0e5758a91793c3f5f8bece49b",
        "lessThan": "df22adc7eafc22e651561813c11dc51a796b12ee",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "65f53e9802dbfae0e5758a91793c3f5f8bece49b",
        "lessThan": "a6b22dbd80926556290ad2243be25218d6956a19",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "65f53e9802dbfae0e5758a91793c3f5f8bece49b",
        "lessThan": "563a8573047182f550b1e1e030615755cd8c41da",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "65f53e9802dbfae0e5758a91793c3f5f8bece49b",
        "lessThan": "bb067a99a0356196c0b89a95721985485ebce5a5",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/bluetooth/bnep/core.c"
    ],
    "versions": [
      {
        "version": "3.13",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.13",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.261",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.212",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.178",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.145",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.96",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.39",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.4",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2-rc3",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/46a88784c4c9b96954dd86f747ce93f65efa1302
git	www.git.kernel.org/stable/c/df22adc7eafc22e651561813c11dc51a796b12ee
git	www.git.kernel.org/stable/c/551ae773ec64045b4e72099132654887e0270bcc
git	www.git.kernel.org/stable/c/a6b22dbd80926556290ad2243be25218d6956a19
git	www.git.kernel.org/stable/c/563a8573047182f550b1e1e030615755cd8c41da
git	www.git.kernel.org/stable/c/bb067a99a0356196c0b89a95721985485ebce5a5
git	www.git.kernel.org/stable/c/ae215c5b6422d8eda443b861b124bd1be6969c31
git	www.git.kernel.org/stable/c/390b5db3ff8745187f094c4e915663b7b1f98944

25 Jul 2026 10:17Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.0022