PT-2026-61265 · Linux · Linux

CVE-2026-63948 · Publicado 2026-07-19 · Atualizado 2026-07-19

NVD

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: fix chan ref leak in l2cap chan timeout() on !conn

set chan timer() takes a l2cap chan reference via l2cap chan hold() before scheduling the delayed work. The normal path in l2cap chan timeout() drops this reference with l2cap chan put() at the end, but the early return when chan->conn is NULL skips the put, leaking the reference.

Add the missing l2cap chan put() before the early return.

Identificadores relacionados

CVE-2026-63948

Produtos afetados

Linux

Referências · 9

• https://git.kernel.org/stable/c/107c826e4ef9ec5ad8f60e6fe64d8d5325ba508f · Nota
• https://git.kernel.org/stable/c/63cd225cc13d782a85e2a73c04d0d350153eada1 · Nota
• https://git.kernel.org/stable/c/e8a5baff5be273ca07771fd2b9bb1f2a4152917b · Nota
• https://git.kernel.org/stable/c/b5c59a5b469e2a809a2d57eda4ded94235971060 · Nota
• https://git.kernel.org/stable/c/08d81fe96f80a8e20c7acb573b6a45d901fcf2cd · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-63948 · Nota de Segurança
• https://git.kernel.org/stable/c/50f1bcaaaa3a80bb1c3472044bc146e8d49d51ee · Nota
• https://git.kernel.org/stable/c/8894c2010435a56ce7c6c2a8785860c13554df2f · Nota
• https://git.kernel.org/stable/c/9dbd84990394c51f5cee1e8871bb5ff8af5ed939 · Nota