Get real-time updates on Telegram
CVE-2026-63976: Linux 5.7
CVE-2026-63976. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00456 (percentile 0.38043), scored 15-Oct-2026.
Affected technology
Linux · 15f02b91056253e8cdc592888f431da0731337b8 to before 59f5ecf6ad5c4db6ae81965a96156954a3b0d89a, 15f02b91056253e8cdc592888f431da0731337b8 to before ae0152d77d101c920769934fb102b18de0c6f526, 15f02b91056253e8cdc592888f431da0731337b8 to before c2afd2613fda90107c5e2fe8e855627451749c78, 15f02b91056253e8cdc592888f431da0731337b8 to before cc2b4f749de09975bfa06e58bbbad2f6acd4c79c, 15f02b91056253e8cdc592888f431da0731337b8 to before 3b5b5f423b4fd23404a393bda8adba3cd6f74ef1, 15f02b91056253e8cdc592888f431da0731337b8 to before f39049304ba655ffcbb92edbdf8c51a1f1210bed, 15f02b91056253e8cdc592888f431da0731337b8 to before 8e7977afaef37c6bd2b2654f1bce6ab40d471147, 15f02b91056253e8cdc592888f431da0731337b8 to before 00e1950716c6ed67d74777b2db286b0fa23b4be9
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: net/bluetooth/l2cap_core.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.3 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00456 · percentile 0.38043 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-63976.html