SB2026081647 - Use-after-free in Linux kernel bluetooth

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026081647

SB2026081647 - Use-after-free in Linux kernel bluetooth

Published: August 16, 2026

Security Bulletin ID SB2026081647
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Use-after-free (CVE-ID: CVE-2026-72336)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a use-after-free in lowpan_control_write in the Bluetooth 6LoWPAN subsystem when handling a debugfs control write that races with L2CAP connection teardown. A local user can trigger concurrent connection and disconnect or device close activity to cause a denial of service.

The issue arises because an L2CAP connection reference is not held after device protection is released, allowing the connection to be freed before later dereference.


Remediation

Install update from vendor's website.

References