Get real-time updates on Telegram
CVE-2026-90093: Linux 7.2
CVE-2026-90093. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00165 (percentile 0.05337), scored 14-Oct-2026.
Affected technology
Linux · d3b739db5dc6f688a60d56da872fabaf65246032 to before 8460dc49c9756a1e9288218060b4d41e1b704905, b66774b48dd98f07254951f74ea6f513efe7ff8b to before f49321c85785178214fd67f2e9b4b73d6363783b, b66774b48dd98f07254951f74ea6f513efe7ff8b to before ca2c4c26498643f421d35ffe258fafbd3ed461c3, 8f90405a4a6f1f1880dc07996b47bf57c712bd8a, 32d783cafb46ff3ca58e6f9fd62c9c5f35eaf26b, 8922c7940bae9ce4b1736dddb6362370793835c2, 91047a4396a8b1857a6f712a90cf33ec0012b189, 0b0e2bf39cf99e458d991b9df253727e036a7d7d, 50c38d9f42a529691e4e67ea9cedf4f0bfc8d277, 6.18.39 to before 6.18.57, 5.10.265 to before 5.11, 5.15.216 to before 5.16, 6.1.183 to before 6.2, 6.6.145 to before 6.7, 6.12.97 to before 6.13, 7.1.4 to before 7.2
Linux
Linux · 7.2
Linux
Component: Not specified by the source
File: net/bluetooth/l2cap_sock.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00165 · percentile 0.05337 · 2026-10-14
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-15 12:39:55.759815+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 11:57:11.427822+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-90093.html