CVE-2026-52918: Bluetooth: serialize accept_q access
Bluetooth: serialize acceptq access
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Compensating control
Rework bt_accept_dequeue() (under Bluetooth) to take temporary child references and protect accept_q with a dedicated lock for queue updates and polling, preventing an unsynchronized accept queue walk (bt_sock_poll) from racing with child teardown that can unlink the same socket and drop its last reference.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52918?
CVE-2026-52918 has a risk score of 37.
What systems are affected by CVE-2026-52918?
CVE-2026-52918 affects the Linux kernel, specifically related to Bluetooth socket handling.
How do I fix CVE-2026-52918?
To fix CVE-2026-52918, update the Linux kernel to the patched version provided by your distribution.
What does CVE-2026-52918 affect in the Linux kernel?
CVE-2026-52918 affects the synchronization of the accept queue in Bluetooth socket handling.
Is CVE-2026-52918 a remote vulnerability?
CVE-2026-52918 involves local access due to the nature of the Bluetooth socket operations.