CVE-2026-64206

🗓️ 20 Jul 2026 17:18:22Reported by [email protected]Type

Linux kernel Bluetooth L2CAP fix: cancel pending_rx_work before lock to prevent deadlock.

Reporter	Title	Published	Views	Family All 103
attackerkb	CVE-2026-64206	20 Jul 202616:27	–	attackerkb
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1	5 Oct 202611:39	–	astralinux
CBLMariner	CVE-2026-64206 affecting package kernel for versions less than 6.6.145.2-1	12 Aug 202623:21	–	cbl_mariner
Chainguard	CVE-2026-64206 vulnerabilities	14 Aug 202602:17	–	cgr
Circl	CVE-2026-64206	20 Jul 202618:36	–	circl
CNNVD	Linux Kernel Security Vulnerabilities	19 Jul 202616:00	–	cnnvd
CVE	CVE-2026-64206	20 Jul 202616:27	–	cve
Cvelist	CVE-2026-64206 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock	20 Jul 202616:27	–	cvelist
Debian	[SECURITY] [DLA 4717-1] linux security update	5 Aug 202608:03	–	debian
Debian	[SECURITY] [DLA 4720-1] linux security update	5 Aug 202616:10	–	debian

NVD

Node

linux linux_kernelRange3.15.5–3.16

linux linux_kernelRange3.16.1–5.10.261

linux linux_kernelRange5.11–5.15.212

linux linux_kernelRange5.16–6.1.178

linux linux_kernelRange6.2–6.6.145

linux linux_kernelRange6.7–6.12.97

linux linux_kernelRange6.13–6.18.39

linux linux_kernelRange6.19–7.1.4

Source	Link
git	www.git.kernel.org/stable/c/e96fbac8d3a73b0bc165383c092a30628561d320
git	www.git.kernel.org/stable/c/9901f847a762a5d953871dd95767ce2aed3d684d
git	www.git.kernel.org/stable/c/4a0bb0fd63fe2b0c62e1072cd1811d6f61e0081c
git	www.git.kernel.org/stable/c/2641a9e0a1dd4af2e21995470a21d55dd35e5203
git	www.git.kernel.org/stable/c/8de7b386ffad480ca59222b688c94a2da8f0d805
git	www.git.kernel.org/stable/c/8daaf7f73fe998631a160d1a5a7e1b0b0480eef8
git	www.git.kernel.org/stable/c/d5616beb3355b5fca2280d796c1cf7ada4ee6551
git	www.git.kernel.org/stable/c/fc0c3b9cf27cfa2a06f66dae1d08c668fe0a2faa

19 Oct 2026 21:17Current

CVSS 3.18.8

EPSS0.00252

SSVC