CVE-2026-90091: Linux 7.2

Affected technology

Linux · b39298044e5534612511a2ff5de03ba5f6e7a820 to before 827de6bd2865b22aaabd554540def3b8a33018ab, 8c37e4338c801ebb8cee52436c01c41e009f6e87 to before 7c7ac736b50fa259ed1bdddc18d79523f07c0442, 84e718b6a814edc84159361f9f454a4e92ae91ae to before 4f8c63fe0097c9f6ea34409f82f79b3894903d91, 36da806f7fbaee56ad9e81859deec203f9728700 to before 61d5ddbd524c715b224cbe7e9f01da4e05098b19, 6fef032af0092ed5ccb767239a9ac1bc38c08a40 to before 32a7bc6e93be36b37fe61f351d312d358195bd61, 6fef032af0092ed5ccb767239a9ac1bc38c08a40 to before 66d6ef18548ae6d7dd452b84115fc82c0a73a4ea, 733e76e74e406c1d1ddc7369420dd8a47f48bb8a, 6.1.178 to before 6.1.188, 6.6.145 to before 6.6.157, 6.12.97 to before 6.12.110, 6.18.40 to before 6.18.52, 7.1.5 to before 7.2
Linux

Linux · 7.2
Linux

Component: Not specified by the source
File: include/net/bluetooth/l2cap.h, net/bluetooth/l2cap_sock.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.