Vulnerability in Linux
CVE-2026-23395
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Currently the code attempts to accept requests regardless of the command identifier which may cause multipl…
EPSS: 0.000 (14.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 15f02b91056253e8cdc592888f431da0731337b8, 5.7, 0
References
- git.kernel.org/stable/c/10a7a702542240d5edb2b39450ac951c59ccd009
- git.kernel.org/stable/c/46e5b71666fb7652082e4e214a3365f4b14f1dc3
- git.kernel.org/stable/c/fb4a3a26483f3ea2cd21c7a2f7c45d5670600465
- git.kernel.org/stable/c/2124d82fd25e1671bb3ceb37998af5aae5903e06
- git.kernel.org/stable/c/6b949a6b33cbdf621d9fc6f0c48ac00915dbf514
- git.kernel.org/stable/c/8d0d94f8ba5b3a0beec3b0da558b9bea48018117
- git.kernel.org/stable/c/e72ee455297b794b852e5cea8d2d7bb17312172a
- git.kernel.org/stable/c/5b3e2052334f2ff6d5200e952f4aa66994d09899
Frequently asked questions
- What is CVE-2026-23395?
- CVE-2026-23395 is a high-severity vulnerability in Linux. CVSS score: 8.8/10. Published 2026-03-25.
- How severe is CVE-2026-23395?
- High severity. CVSS v3 base score is 8.8 out of 10.