Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2cap_le_command_rej.
Affected products
linux: linux kernel
References8
- git.kernel.org/stable/c/149daab45922ab1ac7f0cbeacab7251a46bf5e63 Patch
- git.kernel.org/stable/c/1a40c56e8bff3e424724d78a9a6b3272dd8a371d Patch
- git.kernel.org/stable/c/255be68150291440657b2cdb09420b69441af3d8 Patch
- git.kernel.org/stable/c/2958cf9f805b9f0bdc4a761bf6ea281eb8d44f8e Patch
- git.kernel.org/stable/c/548a6b64b3c0688f01119a6fcccceb41f8c984e4 Patch
- git.kernel.org/stable/c/e76bab1b7afa580cd76362540fc37551ada4359b Patch
- git.kernel.org/stable/c/f752a0b334bb95fe9b42ecb511e0864e2768046f Patch
- git.kernel.org/stable/c/fe49aa73cca6608714477b74bfc6874b9db979df Patch
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 14 · as of 8 November 2026
- CWE
- CWE-416
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.