CVE-2026-64434

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Bluetooth L2CAP implementation. The function l2cap chan timeout() operates asynchronously and accesses the chan->conn variable. If a connection is terminated while the timer is active or pending, chan->conn may be freed. This leads to a use-after-free condition when the timer worker subsequently attempts to lock the conn->lock variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.