> CVE-2026-63975

« BACK_TO_HOME
PUBLISHED
2026-07-19 16:17
MODIFIED
2026-07-19 16:17
EPSS (Prob. Exploit)
0.27%
Top 81.2%
DATA SOURCES:
NVD 🔗 2026-07-19 RED HAT 🔗 2026-07-26 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-07-26

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp If dcid is received for an already-assigned destination CID the spec requires that both channels to be discarded, but calling l2cap_chan_del may invalidate the tmp cursor created by list_for_each_entry_safe and in fact it is the wrong procedure as the chan->dcid may be assigned previously it really needs to be disconnected. Calling l2cap_chan_clone directly may still lead to l2cap_chan_del so instead schedule l2cap_chan_timeout with delay 0 to close the channel asynchronously.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (...
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (C...
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (C...
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp

AFFECTED PACKAGES:
Unknown / Unknown
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
19/07/2026 16:17
Source: NVD
📊 ENRICHISSEMENT 26/07/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 26/07/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 2 Dernière mise à jour: 3 months ago

> REFERENCES

https://git.kernel.org/stable/c/291eec1041c918c460dc9702e44edd17794b4a4b
https://git.kernel.org/stable/c/3c8eaa91eb433c450426539290be4ffe282e9f00
https://git.kernel.org/stable/c/41c2713b204e6cb6a94587bc6bf6935107df5479
https://git.kernel.org/stable/c/41e29548b5e8b5e5fcf708786b3bea67cab107fa
https://git.kernel.org/stable/c/6319b38fe69f56ed95680ade485b957a53fff642
https://git.kernel.org/stable/c/d153b8898c0051eb8b6a083b35cbe304a5886bd5
https://git.kernel.org/stable/c/e6833e737a51db1e5ea0401322acf5e22abd8be6
https://git.kernel.org/stable/c/ecfed1e0d8efecad6737a0d83e21d2fd021d8c48
« BACK_TO_HOME