PT-2026-30155 · Linux · Linux Kernel

Syzbot · Published 2026-04-03 · Updated 2026-05-20 · CVE-2026-23461

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's Bluetooth L2CAP implementation, specifically within the l2cap unregister user function. A race condition occurs because l2cap register user and l2cap unregister user do not use the conn->lock mechanism, allowing concurrent access to conn->users and conn->hchan alongside l2cap conn del. This can result in a use-after-free condition and list corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-23461

OESA-2026-1946

OESA-2026-1947

OESA-2026-1948

Affected Products

Linux Kernel

References · 34

• https://nvd.nist.gov/vuln/detail/CVE-2026-31393 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31408 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1947 · Vendor Advisory
• https://git.kernel.org/stable/c/71030f3b3015a412133a805ff47970cdcf30c2b8 · Patch
• https://git.kernel.org/stable/c/11a87dd5df428a4b79a84d2790cac7f3c73f1f0d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31405 · Security Note
• https://git.kernel.org/stable/c/da3000cbe4851458a22be38bb18c0689c39fdd5f · Patch
• https://git.kernel.org/stable/c/752a6c9596dd25efd6978a73ff21f3b592668f4a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23461 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23461 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23461 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23461 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23269 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23441 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-23461 · Vendor Advisory