IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-03-25 11:16

MODIFIED

2026-03-25 11:16

EPSS (Prob. Exploit)

0.27%

Top 80.2%

DATA SOURCES:

NVD 🔗 2026-03-25 RED HAT 🔗 2026-03-29 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-01 MSRC 🔗 2026-11-02

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Currently the code attempts to accept requests regardless of the command identifier which may cause multiple requests to be marked as pending (FLAG_DEFER_SETUP) which can cause more than L2CAP_ECRED_MAX_CID(5) to be allocated in l2cap_ecred_rsp_defer causing an overflow. The spec is quite clear that the same identifier shall not be used on subsequent requests: 'Within each signaling channel a different Identifier shall be used for each successive request or indication.' https://www.bluetooth.com/wp-content/uploads/Files/Specification/HTML/Core-62/out/en/host/logical-link-control-and-adaptation-protocol-specification.html#UUID-32a25a06-4aa4-c6c7-77c5-dcfe3682355d So this attempts to check if there are any channels pending with the same identifier and rejects if any are found.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY

Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ

AFFECTED PACKAGES:

Unknown / Unknown

Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition

25/03/2026 11:16

Source: NVD

📊 ENRICHISSEMENT 29/03/2026 05:01

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 23:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 22:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 21:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 20:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 19:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 18:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 17:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 16:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 15:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 14:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 13:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 12:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 11:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 10:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 09:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 08:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 07:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 06:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 05:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 04:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 03:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 02:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 01:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Moderate" }

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 00:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

N/A

Nouvelle valeur:

{ "threat_severity": "Moderate", "severity_scale": null }

📊 ENRICHISSEMENT 26/03/2026 00:30

REDHAT

Champ modifié: Red Hat

Ancienne valeur:

Non

Nouvelle valeur:

Oui

Total des modifications: 26 Dernière mise à jour: 7 months ago

> REFERENCES

https://git.kernel.org/stable/c/2124d82fd25e1671bb3ceb37998af5aae5903e06

https://git.kernel.org/stable/c/5b3e2052334f2ff6d5200e952f4aa66994d09899

https://git.kernel.org/stable/c/6b949a6b33cbdf621d9fc6f0c48ac00915dbf514

https://git.kernel.org/stable/c/8d0d94f8ba5b3a0beec3b0da558b9bea48018117

https://git.kernel.org/stable/c/e72ee455297b794b852e5cea8d2d7bb17312172a

https://git.kernel.org/stable/c/fb4a3a26483f3ea2cd21c7a2f7c45d5670600465

« BACK_TO_HOME

> CVE-2026-23395

> DESCRIPTION

> AFFECTED_PRODUCTS

> RED HAT SEVERITY ASSESSMENT

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

> HISTORIQUE DES MODIFICATIONS

> REFERENCES