CVE-2026-46138: linux kernel from 6.4.16 (inclusive), before 6.5 (exclusive), from 6.5.3 (inclusive), before 6.6.140 (exclusive), from…

Affected technology

linux kernel · from 6.4.16 (inclusive), before 6.5 (exclusive)
linux

linux kernel · from 6.5.3 (inclusive), before 6.6.140 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

Linux · a0bfde167b506423111ddb8cd71930497a40fc54 to before 6cb7f67bc28da787499291a562d49a084d9c90cd, a0bfde167b506423111ddb8cd71930497a40fc54 to before 22559ad7654f61727fc270ee4893da9f4b70cf17, a0bfde167b506423111ddb8cd71930497a40fc54 to before 77981a507aa0fc001dc37f0dd6631dd2042fed17, a0bfde167b506423111ddb8cd71930497a40fc54 to before 665da0baaf0396f9ed3c86ccb3955dcd0b73e774, a0bfde167b506423111ddb8cd71930497a40fc54 to before 5ddb8014261137cadaf83ab5617a588d80a22586, b475c1109251e30ec21fb574d72a1c71a4ab0039, 2ccde10127447c1a5caad8469fede945bdb62fdf, 6.4.16 to before 6.5, 6.5.3 to before 6.6
Linux

Linux · 6.6
Linux

Component: Not specified by the source
File: net/bluetooth/hci_event.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.