Vulnerability in Linux

CVE-2026-68085

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled HCI_UART_SENDING bit in tx_state means write_work is pending and blocks queueing it again. Currently this bit is not cleared when canceling the work in hci_uart_close(), which blocks future writes when device is reopened later if write_work was pending. Fix by clearing HCI_UART_SENDING when canceling the work. Also make clearing of tx_skb safe by using disable_work_sync + enable_work instead of just cancel_work_sync. hci_uart_flush() purges the proto tx queue so we can cancel the pending write_work there, instead of doing it just in hci_uart_close(). Re-enable and possibly requeue the work after queue flush.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.003 (16.8th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 17th percentile — 16.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-68085: held from 0.003 to 0.003.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000

Affected products

  • Linux — versions 7.1, 78aad93e938f013d9272fe0ee168f27883afa95c, 192cb0f1ca706d9a1bc36ae0ad5f666d1e4fd894

References

Frequently asked questions

What is CVE-2026-68085?
CVE-2026-68085 is a high-severity vulnerability in Linux. CVSS score: 8.0/10. Published 2026-08-10.
How severe is CVE-2026-68085?
High severity. CVSS v3 base score is 8.0 out of 10.