PT-2026-64629 · Linux · Linux

CVE-2026-64408 · Published 2026-07-25 · Updated 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bnep: pin L2CAP connection during netdev registration

bnep add connection() reads the L2CAP connection without holding the channel lock, then passes its HCI device to register netdev(). Controller teardown can clear and release that connection concurrently, leaving the network device registration path to dereference a freed parent device.

Take a reference to the L2CAP connection while holding the channel lock. Retain it until register netdev() has taken the parent device reference.

Related Identifiers

CVE-2026-64408

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-64408 · Security Note
• https://git.kernel.org/stable/c/bb067a99a0356196c0b89a95721985485ebce5a5 · Note
• https://git.kernel.org/stable/c/390b5db3ff8745187f094c4e915663b7b1f98944 · Note
• https://git.kernel.org/stable/c/a6b22dbd80926556290ad2243be25218d6956a19 · Note
• https://git.kernel.org/stable/c/563a8573047182f550b1e1e030615755cd8c41da · Note
• https://git.kernel.org/stable/c/df22adc7eafc22e651561813c11dc51a796b12ee · Note
• https://git.kernel.org/stable/c/ae215c5b6422d8eda443b861b124bd1be6969c31 · Note
• https://git.kernel.org/stable/c/46a88784c4c9b96954dd86f747ce93f65efa1302 · Note
• https://git.kernel.org/stable/c/551ae773ec64045b4e72099132654887e0270bcc · Note