CVE-2026-64434

🗓️ 25 Jul 2026 10:17:27Reported by [email protected]Type

Linux kernel Bluetooth L2CAP use-after-free; fix by holding connection reference during channel timeout.

Reporter	Title	Published	Views	Family All 63
attackerkb	CVE-2026-64434	25 Jul 202608:51	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 6.12	8 May 202609:09	–	astralinux
CBLMariner	CVE-2026-64434 affecting package kernel for versions less than 6.6.145.2-1	12 Aug 202623:21	–	cbl_mariner
Circl	CVE-2026-64434	15 Sep 202612:46	–	circl
CVE	CVE-2026-64434	25 Jul 202608:51	–	cve
Cvelist	CVE-2026-64434 Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref	25 Jul 202608:51	–	cvelist
Debian	[SECURITY] [DLA 4724-1] linux-6.12 new package	7 Aug 202609:29	–	debian
Debian	[SECURITY] [DLA 4777-1] linux security update	8 Sep 202616:49	–	debian
Debian	[SECURITY] [DSA 6405-1] linux security update	31 Jul 202614:14	–	debian
Debian CVE	CVE-2026-64434	25 Jul 202608:51	–	debiancve

NVD

Node

linux linux_kernelRange5.10.259–5.10.265

linux linux_kernelRange5.15.210–5.15.216

linux linux_kernelRange6.1.176–6.1.183

linux linux_kernelRange6.6.143–6.6.145

linux linux_kernelRange6.12.93–6.12.97

linux linux_kernelRange6.18.35–6.18.39

linux linux_kernelRange7.0.12–7.1

linux linux_kernelRange7.1.1–7.1.4

Source	Link
git	www.git.kernel.org/stable/c/50c38d9f42a529691e4e67ea9cedf4f0bfc8d277
git	www.git.kernel.org/stable/c/d3b739db5dc6f688a60d56da872fabaf65246032
git	www.git.kernel.org/stable/c/0b0e2bf39cf99e458d991b9df253727e036a7d7d
git	www.git.kernel.org/stable/c/8922c7940bae9ce4b1736dddb6362370793835c2
git	www.git.kernel.org/stable/c/8f90405a4a6f1f1880dc07996b47bf57c712bd8a
git	www.git.kernel.org/stable/c/b66774b48dd98f07254951f74ea6f513efe7ff8b
git	www.git.kernel.org/stable/c/91047a4396a8b1857a6f712a90cf33ec0012b189
git	www.git.kernel.org/stable/c/32d783cafb46ff3ca58e6f9fd62c9c5f35eaf26b

03 Sep 2026 18:22Current

CVSS 3.18.8

EPSS0.00255