Yüksek CVSS 8.8

CVE-2026-53071: Linux Kernel: güvenlik açığı

Yayın: 24 Haziran 2026 20:17 · Güncelleme: 6 Kasım 2026 10:33

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock(). Every other l2cap_chan_del() caller in the file acquires the lock first. A remote BLE device can send a crafted L2CAP ECRED reconfiguration response to corrupt the channel list while another thread is iterating it. Add l2cap_chan_hold() and l2cap_chan_lock() before l2cap_chan_del(), and l2cap_chan_unlock() and l2cap_chan_put() after, matching the pattern used in l2cap_ecred_conn_rsp() and l2cap_conn_del().

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,43 (yüzdelik 37)
CWE: CWE-667
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	5.7	—	5.10.258
linux-linux-kernel	5.11	—	5.15.209
linux-linux-kernel	5.16	—	6.1.175
linux-linux-kernel	6.2	—	6.6.141
linux-linux-kernel	6.7	—	6.12.91
linux-linux-kernel	6.13	—	6.18.33
linux-linux-kernel	6.19	—	7.0.10

Kaynaklar

Uygulamada aç Tüm CVE kayıtları