P4Verified

CVE-2026-63975: linux kernel from 5.7 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-63975. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00354 (percentile 0.27514), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · 15f02b91056253e8cdc592888f431da0731337b8 to before 3c8eaa91eb433c450426539290be4ffe282e9f00, 15f02b91056253e8cdc592888f431da0731337b8 to before ecfed1e0d8efecad6737a0d83e21d2fd021d8c48, 15f02b91056253e8cdc592888f431da0731337b8 to before e6833e737a51db1e5ea0401322acf5e22abd8be6, 15f02b91056253e8cdc592888f431da0731337b8 to before 6319b38fe69f56ed95680ade485b957a53fff642, 15f02b91056253e8cdc592888f431da0731337b8 to before 291eec1041c918c460dc9702e44edd17794b4a4b, 15f02b91056253e8cdc592888f431da0731337b8 to before 41e29548b5e8b5e5fcf708786b3bea67cab107fa, 15f02b91056253e8cdc592888f431da0731337b8 to before d153b8898c0051eb8b6a083b35cbe304a5886bd5, 15f02b91056253e8cdc592888f431da0731337b8 to before 41c2713b204e6cb6a94587bc6bf6935107df5479
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: net/bluetooth/l2cap_core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 16:57 UTC

CWE: CWE-416
CCR priority: 35.3 /100 (P4)
CVSS 3.1: 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00354 · percentile 0.27514 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-63975.html