CVE-2026-64178

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) read occurs in the Bluetooth BNEP (Bluetooth Network Encapsulation Protocol) component. The bnep add connection() function fails to maintain the bnep session sem semaphore while reading the dev->name variable. This allows the bnep session() thread to concurrently free the net device, which can be triggered by a simultaneous call to bnep del connection(). Exploitation requires the CAP NET ADMIN capability and a precise race condition during the teardown of a network device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.