CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-23461: linux kernel 6.14; +1 more affected products

CVE-2026-23461. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00247 (percentile 0.14896), scored 15-Oct-2026.

Affected technology

linux kernel · from 6.6.84 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.12.20 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13.8 (inclusive), before 6.14 (exclusive)
linux

linux kernel · from 6.14.1 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 6.14
linux

linux kernel · 6.14 · update rc3
linux

linux kernel · 6.14 · update rc4
linux

linux kernel · 6.14 · update rc5
linux

linux kernel · 6.14 · update rc6
linux

linux kernel · 6.14 · update rc7
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

Linux · efc30877bd4bc85fefe98d80af60fafc86e5775e to before 11a87dd5df428a4b79a84d2790cac7f3c73f1f0d, f87271d21dd4ee83857ca11b94e7b4952749bbae to before c22a5e659959eb77c2fbb58a5adfaf3c3dab7abf, ab4eedb790cae44313759b50fe47da285e2519d5 to before da3000cbe4851458a22be38bb18c0689c39fdd5f, ab4eedb790cae44313759b50fe47da285e2519d5 to before 71030f3b3015a412133a805ff47970cdcf30c2b8, ab4eedb790cae44313759b50fe47da285e2519d5 to before 752a6c9596dd25efd6978a73ff21f3b592668f4a, 18ab6b6078fa8191ca30a3065d57bf35d5635761, 6.6.84 to before 6.6.130, 6.12.20 to before 6.12.78, 6.13.8 to before 6.14
Linux

Linux · 6.14
Linux

Component: Not specified by the source
File: net/bluetooth/l2cap_core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

A attacker can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

Published

CWE
CWE-416
CCR priority
35.3 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00247 · percentile 0.14896 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23461.html