PT-2026-30156 · Linux · Linux Kernel

CVE-2026-23462 · Published 2026-03-05 · Updated 2026-07-31

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 7.0.0-rc1 through 7.0.0-rc1

Description The Linux kernel contains a use-after-free (UAF) flaw within the Bluetooth HIDP subsystem. The issue arises from a failure to drop the l2cap conn reference when the user's remove callback is invoked, leading to a potential UAF condition. The provided trace indicates the vulnerability occurs during the disconnection process, specifically within the hci unregister dev and vhci release functions.

Recommendations Update to a newer version of the Linux kernel that addresses this issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

CWE-911

Related Identifiers

BDU:2026-10726

CVE-2026-23462

ECHO-71DC-C825-1B34

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:2068-1

SUSE-SU-2026:2111-1

SUSE-SU-2026:21834-1

SUSE-SU-2026:21841-1

SUSE-SU-2026:21845-1

SUSE-SU-2026:21860-1

SUSE-SU-2026:21876-1

SUSE-SU-2026:21877-1

SUSE-SU-2026:21916-1

SUSE-SU-2026:21919-1

SUSE-SU-2026:2195-1

SUSE-SU-2026:2202-1

SUSE-SU-2026:2215-1

SUSE-SU-2026:2216-1

SUSE-SU-2026:2217-1

SUSE-SU-2026:2238-1

USN-8567-1

USN-8574-1

USN-8574-2

USN-8574-3

USN-8575-1

USN-8575-2

USN-8575-3

USN-8576-1

USN-8576-2

USN-8595-1

USN-8595-2

USN-8595-3

USN-8596-1

USN-8597-1

USN-8606-1

USN-8607-1

USN-8608-1

USN-8609-1

USN-8610-1

USN-8619-1

USN-8620-1

USN-8620-2

USN-8620-3

USN-8620-4

Affected Products

Linux Kernel

References · 1940

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23462.json · Exploit
• https://ubuntu.com/security/CVE-2026-52916 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43371 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31416 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31580 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46157 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23462 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45928 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23361 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43412 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23138 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45969 · Vendor Advisory