Vulnerability in Linux

CVE-2026-63948

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn __set_chan_timer() takes a l2cap_chan reference via l2cap_chan_hold() before scheduling the delayed…

EPSS: 0.002 (11.4th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 06acb75e7ed600d0bbf7bff5628aa8f24a97978c, e97e16433eb4533083b096a3824b93a5ca3aee79, 8960ff650aec70485b40771cd8e6e8c4cb467d33

References