PT-2026-61495 · Linux · Linux Kernel

CVE-2026-64178 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) read occurs in the Bluetooth BNEP (Bluetooth Network Encapsulation Protocol) component. The bnep add connection() function fails to maintain the bnep session sem semaphore while reading the dev->name variable. This allows the bnep session() thread to concurrently free the net device, which can be triggered by a simultaneous call to bnep del connection(). Exploitation requires the CAP NET ADMIN capability and a precise race condition during the teardown of a network device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64178

Affected Products

Linux Kernel

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-64178 · Security Note
• https://git.kernel.org/stable/c/915a92182e2cda9cd7d2479020a44c6eda986f7c · Note
• https://git.kernel.org/stable/c/5506aec795135cdd4cbf4e845929155663b25055 · Note
• https://git.kernel.org/stable/c/a75bbcb10cb21acc169b785e9804f57d97873a9c · Note
• https://git.kernel.org/stable/c/b21805258d7e926adfd455fc820a447b90da3b82 · Note
• https://git.kernel.org/stable/c/59e932ded949fa6f0340bf7c6d7818f962fa4fd2 · Note
• https://twitter.com/infoflowcloud/status/2078953311324033143 · Twitter Post
• https://twitter.com/CVEnew/status/2078951954164695466 · Twitter Post
• https://git.kernel.org/stable/c/fe69f634b076ae3ca81c5a5b845d9bba527036f7 · Note
• https://git.kernel.org/stable/c/e7578529b97e5d4e439cf8f3e637c2303015338f · Note
• https://git.kernel.org/stable/c/4907596f25b1720fa948371ac5f6c1f8da10a5bc · Note