CVE-2026-64178

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-64178

Key Details

CVE	CVE-2026-64178
CVSS Score / Version	8.8 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is adjacent; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel
Classified as	CWE-416 (Use After Free)

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bnep: Fix UAF read of dev->name

bnep_add_connection() needs to keep holding the bnep_session_sem while

reading dev->name (just like bnep_get_connlist() does); otherwise the

bnep_session() thread can concurrently free the net_device, which can for

example be triggered by a concurrent bnep_del_connection().

(This UAF is fairly uninteresting from a security perspective;

calling bnep_add_connection() requires passing a capable(CAP_NET_ADMIN)

check. It also requires completely tearing down a netdev during a fairly

tight race window.) (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-64178
CVE	https://www.cve.org/CVERecord?id=CVE-2026-64178

Source

Reference

NVD

CVE