Use-After-Free Vulnerability in Linux Kernel Bluetooth Interface

CVE-2026-64178

What is CVE-2026-64178?

A use-after-free vulnerability has been identified in the Bluetooth implementation of the Linux kernel. Specifically, the function bnep_add_connection() fails to maintain a lock on the bnep_session_sem while accessing dev->name. This oversight allows for a potential race condition where the net_device can be freed concurrently by the bnep_session() thread, especially during the execution of bnep_del_connection(). Although this vulnerability requires elevated privileges (CAP_NET_ADMIN) to exploit, it necessitates immediate attention to ensure the integrity of device operations and prevent potential disruption.

References