PT-2026-27760 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23395

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the Bluetooth L2CAP implementation. The code incorrectly handles multiple L2CAP ECRED CONN REQ requests, potentially leading to an overflow in the l2cap ecred rsp defer function when more than L2CAP ECRED MAX CID (5) channels are allocated. This occurs because the code does not properly validate the command identifier for subsequent requests, violating the Bluetooth specification which requires a unique identifier for each request within a signaling channel. The specification states that the same identifier shall not be used on subsequent requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23395

ECHO-279F-296B-F917

OESA-2026-1862

OESA-2026-1863

OESA-2026-1864

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:21114-1

SUSE-SU-2026:21123-1

SUSE-SU-2026:21255-1

SUSE-SU-2026:21841-1

SUSE-SU-2026:21845-1

SUSE-SU-2026:21860-1

SUSE-SU-2026:2217-1

Affected Products

Linux Kernel

References · 227

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23395.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-23404 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68315 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23395 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23368 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-23395 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23395 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23255 · Security Note
• https://git.kernel.org/stable/c/6b949a6b33cbdf621d9fc6f0c48ac00915dbf514 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:21114-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23254 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23391 · Security Note
• https://git.kernel.org/stable/c/10a7a702542240d5edb2b39450ac951c59ccd009 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23405 · Security Note