CVE-2026-64557

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Bluetooth L2CAP implementation. The function l2cap sock new connection cb() returns a channel after release sock(parent) is called. Because the parent lock is dropped, the newly enqueued child socket sk becomes reachable via the accept queue, allowing another task to accept and free it before the callback dereferences sk.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.