CVE-2026-64406

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the Bluetooth component. The bt accept dequeue() function drops a temporary reference before calling bt accept unlink(), which subsequently drops the queue reference. This leads to a situation where sock hold() accesses freed memory if the reference was the final one, a condition detected by KASAN during the cleanup of listening L2CAP sockets. Use-After-Free is a condition where a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.