CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-64434: linux kernel 7.1; +1 more affected products

CVE-2026-64434. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00255 (percentile 0.15913), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.10.259 (inclusive), before 5.10.265 (exclusive)
linux

linux kernel · from 5.15.210 (inclusive), before 5.15.216 (exclusive)
linux

linux kernel · from 6.1.176 (inclusive), before 6.1.183 (exclusive)
linux

linux kernel · from 6.6.143 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.12.93 (inclusive), before 6.12.97 (exclusive)
linux

linux kernel · from 6.18.35 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 7.0.12 (inclusive), before 7.1 (exclusive)
linux

linux kernel · from 7.1.1 (inclusive), before 7.1.4 (exclusive)
linux

linux kernel · 7.1
linux

linux kernel · 7.1 · update rc6
linux

linux kernel · 7.1 · update rc7
linux

Linux · 3634cbdc2eb414b69ffa752ddbe5e0458518e321 to before 8f90405a4a6f1f1880dc07996b47bf57c712bd8a, e1c100e2d61bd8c718b7d91fe3e050780a9bf72d to before 32d783cafb46ff3ca58e6f9fd62c9c5f35eaf26b, deb8493a8fa599f6c95e2465b12bfdfb7f94a1d9 to before 8922c7940bae9ce4b1736dddb6362370793835c2, 89dec92041717b027216e110599e4f6d6c921b79 to before 91047a4396a8b1857a6f712a90cf33ec0012b189, 50dfec218808b148ab4247b1858031b7a32015c5 to before 0b0e2bf39cf99e458d991b9df253727e036a7d7d, 859d3ace791ed878ae9ba5522c7844d960da8f88 to before d3b739db5dc6f688a60d56da872fabaf65246032, 8c8e620467a7b51562dbcefbd1f09f288d7d710d to before 50c38d9f42a529691e4e67ea9cedf4f0bfc8d277, 8c8e620467a7b51562dbcefbd1f09f288d7d710d to before b66774b48dd98f07254951f74ea6f513efe7ff8b, 7555fd885a0603f50e49a655850a1f2bd8a25398, 5.10.259 to before 5.10.265, 5.15.210 to before 5.15.216, 6.1.176 to before 6.1.183, 6.6.143 to before 6.6.145, 6.12.93 to before 6.12.97, 6.18.35 to before 6.18.39, 7.0.12 to before 7.1
Linux

Linux · 7.1
Linux

Component: Not specified by the source
File: include/net/bluetooth/l2cap.h, net/bluetooth/l2cap_core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
35.3 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00255 · percentile 0.15913 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64434.html