All vulnerabilities

Servers and applications

CVE-2026-99009

Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex

Severity
Unrated
Published
23 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
5.15.224, 6.1.191, 6.6.160, 6.12.114, 6.18.58, 7.2.11
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 7.2.4 before 7.2.11
  • From 6.18.50 before 6.18.58
  • From 6.12.109 before 6.12.114
  • From 6.6.157 before 6.6.160
All 7 release lines
  • From 5.10.270 before 5.10.273
  • From 5.15.221 before 5.15.224
  • From 6.1.188 before 6.1.191
  • From 6.6.157 before 6.6.160
  • From 6.12.109 before 6.12.114
  • From 6.18.50 before 6.18.58
  • From 7.2.4 before 7.2.11

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-99009