CVE-2026-63948 Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn

🗓️ 19 Jul 2026 14:55:41Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Kernel fix for L2CAP channel ref leak in l2cap_chan_timeout when conn is NULL.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2026-63948	19 Jul 202614:55	–	cve
Cvelist	CVE-2026-63948 Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn	19 Jul 202614:55	–	cvelist
EUVD	EUVD-2026-45721	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63948	19 Jul 202616:17	–	nvd
OSV	DEBIAN-CVE-2026-63948	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63948	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61265	19 Jul 202600:00	–	ptsecurity
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-63948	20 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/08d81fe96f80a8e20c7acb573b6a45d901fcf2cd
git	www.git.kernel.org/stable/c/107c826e4ef9ec5ad8f60e6fe64d8d5325ba508f
git	www.git.kernel.org/stable/c/50f1bcaaaa3a80bb1c3472044bc146e8d49d51ee
git	www.git.kernel.org/stable/c/63cd225cc13d782a85e2a73c04d0d350153eada1
git	www.git.kernel.org/stable/c/8894c2010435a56ce7c6c2a8785860c13554df2f
git	www.git.kernel.org/stable/c/9dbd84990394c51f5cee1e8871bb5ff8af5ed939
git	www.git.kernel.org/stable/c/b5c59a5b469e2a809a2d57eda4ded94235971060
git	www.git.kernel.org/stable/c/e8a5baff5be273ca07771fd2b9bb1f2a4152917b
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63948.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-63948

21 Jul 2026 03:47Current

5.3Medium risk

Vulners AI Score5.3

EPSS0.0021

bluetooth protocol channel leak kernel fix