CVE-2026-64406

CVE-2026-64406 affects the Linux kernel Bluetooth subsystem. Multiple vendors report a use-after-free in bt_accept_dequeue() where a temporary reference to the accept queue is dropped too early, causing sock_hold() to access freed memory during listening L2CAP socket cleanup. The fix retains the ...