CVE-2026-64408

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev registration bnep_add_connection() reads the L2CAP connection without holding the channel lock, then passes its HCI device to register_netdev(). Controller teardown can clear and release that connection concurrently, leaving the network device registration path to dereference a freed parent device. Take a reference to the L2CAP connection while holding the channel lock. Retain it until register_netdev() has taken the parent device reference.

Is your site exposed to CVE-2026-64408?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0022

Probability of exploitation

0.13%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/390b5db3ff8745187f094c4e915663b7b1f98944 https://git.kernel.org/stable/c/46a88784c4c9b96954dd86f747ce93f65efa1302 https://git.kernel.org/stable/c/551ae773ec64045b4e72099132654887e0270bcc https://git.kernel.org/stable/c/563a8573047182f550b1e1e030615755cd8c41da https://git.kernel.org/stable/c/a6b22dbd80926556290ad2243be25218d6956a19 https://git.kernel.org/stable/c/ae215c5b6422d8eda443b861b124bd1be6969c31 https://git.kernel.org/stable/c/bb067a99a0356196c0b89a95721985485ebce5a5 https://git.kernel.org/stable/c/df22adc7eafc22e651561813c11dc51a796b12ee

Frequently Asked Questions

What is CVE-2026-64408? +

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev registration bnep_add_connection() reads the L2CAP connection without holding the channel lock, then passes its HCI device to register_netdev(). Controller teardown can clear and release that connection concurrently, leaving the network device registration path to dereference a freed parent device. Take a reference to the L2CAP connection while holding the channel lock. Retain it until register_netdev() has taken the parent device reference.

How do I check if I'm vulnerable to CVE-2026-64408? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.