Get real-time updates on Telegram
CVE-2026-68391: Linux 6.0
CVE-2026-68391 affects linux. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00129 (percentile 0.02128), scored 03-Oct-2026. Fixed version: 6.12.101-1. Fixed version: 7.1.6-1. Fixed version: 6.12.101-1~deb12u1.
Affected technology
Linux · 7b445e220db9a2c58be5d09bbbd322abf1b1452a to before 84674dd1d3192ecb050827d3148642609c0c9dbb, 7b445e220db9a2c58be5d09bbbd322abf1b1452a to before b56f2ecafc08f372bf0529f9c4f3f429cb1702dc, 7b445e220db9a2c58be5d09bbbd322abf1b1452a to before f915e74b6f18293d1d69a2a3305ef321ff7c0172, 7b445e220db9a2c58be5d09bbbd322abf1b1452a to before d5b3b484b62bb0f4542e7622789d28871626cdf0, 7b445e220db9a2c58be5d09bbbd322abf1b1452a to before ecdcb55ea1c01dda074406f38058785a69526734, 7b445e220db9a2c58be5d09bbbd322abf1b1452a to before da55f570191d5d72f10c607a7043b947eb05ea46
Linux
Linux · 6.0
Linux
Component: Not specified by the source
File: net/bluetooth/mgmt.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- linux
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00129 · percentile 0.02266 · 2026-10-15
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-16 09:43:43.583708+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-68391.html