Get real-time updates on Telegram
CVE-2026-74531: Linux 6.11
CVE-2026-74531. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00254 (percentile 0.15736), scored 15-Oct-2026.
Affected technology
Linux · 249c88e7fb45b6b705040c5af4bd0d0f2bc9735c to before 64d1645f26aa49b5a86ba2fccd0bb6749ea725a6, 227a0cdf4a028a73dc256d0f5144b4808d718893 to before 963fb4b8e7d1ab07b4ae45bf15d41e667c88caca, 227a0cdf4a028a73dc256d0f5144b4808d718893 to before e8f9fef362bab431d95371d3406bc720350290c3, 227a0cdf4a028a73dc256d0f5144b4808d718893 to before fa812cfa81aa3d4a7b6ce8277979af57b3f79712, 227a0cdf4a028a73dc256d0f5144b4808d718893 to before 5761d003daa987ac81463f570713ce9c9dd204e5, 7fe4d391e937c2f048a43ff4b421e677f10d83c0, 58afdc9b18871eb1d461c725be9e9f3f44a39aeb, 6.6.51 to before 6.6.151, 6.1.184 to before 6.2, 6.10.10 to before 6.11
Linux
Linux · 6.11
Linux
Component: Not specified by the source
File: net/bluetooth/hci_conn.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.3 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00254 · percentile 0.15736 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74531.html