Get real-time updates on Telegram
CVE-2026-98109: linux kernel from 6.4.16 (inclusive), before 6.5 (exclusive), from 6.5.3 (inclusive), before 6.12.111 (exclusive)…
CVE-2026-98109 affects linux-lts. CVSS 3.1 base score 4.7 (MEDIUM, NVD). EPSS 0.00089 (percentile 0.0038), scored 03-Oct-2026. Fixed version: 6.12.111-r0. Fixed version: 6.18.53-r0.
Affected technology
linux kernel · from 6.4.16 (inclusive), before 6.5 (exclusive)
linux
linux kernel · from 6.5.3 (inclusive), before 6.12.111 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.53 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.2.7 (exclusive)
linux
linux kernel · 7.3 · update rc1
linux
Linux · 9e14606d8f38ea52a38c27692a9c1513c987a5da to before 593e64f64a20b25e4042c3ee863119eb7f991785, 9e14606d8f38ea52a38c27692a9c1513c987a5da to before b1faf348c29e6f8302ec7769cbf1c1ef05be014f, 9e14606d8f38ea52a38c27692a9c1513c987a5da to before a11ebe8dc0333fb870bbbb656b34690e87ee3f98, 9e14606d8f38ea52a38c27692a9c1513c987a5da to before d427b1c71d9798083e954d3c13469dc0a2305868, 9e14606d8f38ea52a38c27692a9c1513c987a5da to before 57938bbdb9bf7fd41cbd5cd509ec10c4b22bec18, f9965f7f38c90449a5fb26edb8a7d22b1dcf0283, 80fe27811c56ecd3896c3d511ab8298146071d98, 6.4.16 to before 6.5, 6.5.3 to before 6.6
Linux
Linux · 6.6
Linux
Component: Not specified by the source
File: net/bluetooth/hci_core.c, net/bluetooth/msft.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-362
- Product
- linux-lts
- CCR priority
- 18.8 /100 (P5)
- CVSS 3.1
- 4.7 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00089 · percentile 0.0038 · 2026-10-17
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-98109.html