8.8

CVE-2026-64178: linux Use After Free

CVSS: 8.8v3.1HighModified
AliasesUBUNTU-CVE-2026-64178DEBIAN-CVE-2026-64178
Published 19-07-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-64178 is a high (CVSS 8.8) Use After Free vulnerability in linux. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.2% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.25%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 44 · Related 44
OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23477-1SUSE-SU-2026:23481-1SUSE-SU-2026:23528-1SUSE-SU-2026:23529-1SUSE-SU-2026:23881-1

Timeline

  1. 19-07-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_session_sem while reading dev->name (just like bnep_get_connlist() does); otherwise the bnep_session() thread can concurrently free the net_device, which can for example be triggered by a concurrent bnep_del_connection(). (This UAF is fairly uninteresting from a security perspective; calling bnep_add_connection() requires passing a capable(CAP_NET_ADMIN) check. It also requires completely tearing down a netdev during a fairly tight race window.)

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

15%

Versus all other CVEs

30-day change

0.00 pp

From 0.25% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu167 products
  • linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-139.139 | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1064.67 | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a75bbcb10cb21acc169b785e9804f57d97873a9c | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 4907596f25b1720fa948371ac5f6c1f8da10a5bc | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 915a92182e2cda9cd7d2479020a44c6eda986f7c | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < fe69f634b076ae3ca81c5a5b845d9bba527036f7 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b21805258d7e926adfd455fc820a447b90da3b82 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 5506aec795135cdd4cbf4e845929155663b25055 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e7578529b97e5d4e439cf8f3e637c2303015338f | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 59e932ded949fa6f0340bf7c6d7818f962fa4fd2 | 2.6.12
  • linux_kernel≥ 2.6.12.1, < 5.10.258 | ≥ 5.11, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.142 | ≥ 6.7, < 6.12.92 | ≥ 6.13, < 6.18.34 | ≥ 6.19, < 7.0.11 | 2.6.12 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.12-1

3 vendors · 170 products

References

44 links
Show all 44 references