PT-2026-64629 · Linux · Linux

CVE-2026-64408 · Publicado 2026-07-25 · Atualizado 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bnep: pin L2CAP connection during netdev registration

bnep add connection() reads the L2CAP connection without holding the channel lock, then passes its HCI device to register netdev(). Controller teardown can clear and release that connection concurrently, leaving the network device registration path to dereference a freed parent device.

Take a reference to the L2CAP connection while holding the channel lock. Retain it until register netdev() has taken the parent device reference.

Identificadores relacionados

CVE-2026-64408

Produtos afetados

Linux

Referências · 9

• https://git.kernel.org/stable/c/bb067a99a0356196c0b89a95721985485ebce5a5 · Nota
• https://git.kernel.org/stable/c/390b5db3ff8745187f094c4e915663b7b1f98944 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64408 · Nota de Segurança
• https://git.kernel.org/stable/c/a6b22dbd80926556290ad2243be25218d6956a19 · Nota
• https://git.kernel.org/stable/c/563a8573047182f550b1e1e030615755cd8c41da · Nota
• https://git.kernel.org/stable/c/df22adc7eafc22e651561813c11dc51a796b12ee · Nota
• https://git.kernel.org/stable/c/ae215c5b6422d8eda443b861b124bd1be6969c31 · Nota
• https://git.kernel.org/stable/c/46a88784c4c9b96954dd86f747ce93f65efa1302 · Nota
• https://git.kernel.org/stable/c/551ae773ec64045b4e72099132654887e0270bcc · Nota