Use After Free in Zephyrproject Zephyr
CVE-2026-11368
The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer with its owning channel via the static tx_meta_data_storage[] array (data->att_chan = chan). When a buffer's last reference is dropped, its…
Vulnerability class: Use-After-Free
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H.
Affected products
- Zephyrproject Zephyr — versions 4.4.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-11368?
- CVE-2026-11368 is a high-severity vulnerability in Zephyrproject Zephyr, classified under Use After Free. CVSS score: 7.1/10. Published 2026-08-04.
- How severe is CVE-2026-11368?
- High severity. CVSS v3 base score is 7.1 out of 10.