{"cve":"CVE-2026-64408","nvd":{"published":"2026-07-25T10:17:24.517","modified":"2026-10-19T21:17:36.140","status":"Modified","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: bnep: pin L2CAP connection during netdev registration\n\nbnep_add_connection() reads the L2CAP connection without holding the\nchannel lock, then passes its HCI device to register_netdev(). Controller\nteardown can clear and release that connection concurrently, leaving the\nnetwork device registration path to dereference a freed parent device.\n\nTake a reference to the L2CAP connection while holding the channel lock.\nRetain it until register_netdev() has taken the parent device reference.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.8},"cwes":["CWE-416"],"references":["https://git.kernel.org/stable/c/390b5db3ff8745187f094c4e915663b7b1f98944","https://git.kernel.org/stable/c/46a88784c4c9b96954dd86f747ce93f65efa1302","https://git.kernel.org/stable/c/551ae773ec64045b4e72099132654887e0270bcc","https://git.kernel.org/stable/c/563a8573047182f550b1e1e030615755cd8c41da","https://git.kernel.org/stable/c/a6b22dbd80926556290ad2243be25218d6956a19"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-21T03:56:58.798400159+00:00"},"epss":{"cve":"CVE-2026-64408","score":0.00263,"percentile":0.17995,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}