CVE-2026-64408

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth BNEP (Bluetooth Network Encapsulation Protocol) component where the bnep add connection() function reads the L2CAP connection without holding the channel lock before passing the HCI device to register netdev(). This creates a race condition during controller teardown, which can clear and release the connection concurrently, leading the network device registration path to dereference a freed parent device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.