CVE-2026-64408: Bluetooth: bnep: pin L2CAP connection during netdev registration

Published Jul 25, 2026
·
Updated

Bluetooth: bnep: pin L2CAP connection during netdev registration

Affected Software

11 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.144.1-1<6.6.145.2-1
6.6.145.2-1
Linux Linux kernel>=3.13<5.10.261
Linux Linux kernel>=5.11<5.15.212
Linux Linux kernel>=5.16<6.1.178
Linux Linux kernel>=6.2<6.6.145
Linux Linux kernel>=6.7<6.12.96
Linux Linux kernel>=6.13<6.18.39
Linux Linux kernel>=6.19<7.1.4
Linux Linux kernel=7.2-rc1
Linux Linux kernel=7.2-rc2

Event History

Jul 25, 2026
CVE Published
via MITRE·08:50 AM
Data Sourced
via MITRE·08:50 AM
DescriptionSeverity
Data Sourced
via NVD·10:17 AM
RemedyDescriptionSeverityAffected Software
Jul 26, 2026
Data Sourced
via Microsoft·08:07 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:07 AM
DescriptionSeverity

Frequently Asked Questions

1

Who is exposed to this issue?

Systems running an affected Linux kernel or Microsoft azl3 kernel with Bluetooth BNEP functionality in use are exposed during BNEP network-device registration and concurrent controller teardown.

2

What access does an attacker need to exploit it?

The CVSS vector indicates adjacent-network access is sufficient, with no privileges or user interaction required. Exploitation depends on triggering the Bluetooth BNEP connection and the concurrent teardown race.

3

What is the impact if exploitation succeeds?

The race can cause the network-device registration path to dereference a freed parent device. The assigned CVSS score is 8.8, with high confidentiality, integrity, and availability impact.

4

What should be done if patching is not immediately possible?

The provided data does not identify a configuration workaround. Prioritize applying the available patch, particularly on systems where Bluetooth BNEP connections may be established.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203