CVE-2026-64178Patch(linux / linux_kernel)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_session_sem while reading dev->name (just like bnep_get_connlist() does); otherwise the bnep_session() thread can concurrently free the net_device, which can for example be triggered by a concurrent bnep_del_connection(). (This UAF is fairly uninteresting from a security perspective; calling bnep_add_connection() requires passing a capable(CAP_NET_ADMIN) check. It also requires completely tearing down a netdev during a fairly tight race window.)

linux CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_kernel

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-07-19); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

linux

Products

linux_kernel

2 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Patch

375.0%

General

125.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-19	3	Patch3
2026-08-20	1	General1

Full discourse4 posts

Brad Spengler@spendergrsec60d
General
Still active: https://lore.kernel.org/linux-cve-announce/2026072735-CVE-2026-64539-4b67@gregkh/ Still active: https://lore.kernel.org/linux-cve-announce/2026071937-CVE-2026-64178-c16a@gregkh/ Still active: https://lore.kernel.org/linux-cve-announce/2026071925-CVE-2026-64126-a17e@gregkh/ You can find these with a simple grep
Post summary
The post simply references CVE announcement links, indicating they are still active, but provides no additional details, evidence of exploitation, fixes, or proof‑of‑concept information.
00052633
7.1K followersView on X
Infoflowcloud@infoflowcloud92d
Patch
🚨*CVE* CVE-2026-64178 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_… https://www.cve.org/CVERecord?id=CVE-2026-64178 ----- Traducción: CVE-2026-64178 En … http://infoflow.cloud`
Post summary
The text announces that CVE-2026-64178, a use‑after‑free vulnerability in the Linux kernel's Bluetooth BNEP subsystem, has been resolved, though no specific patch details are given.
000009
92 followersView on X
CVE@CVEnew92d
Patch
CVE-2026-64178 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_… https://www.cve.org/CVERecord?id=CVE-2026-64178
Post summary
The advisory confirms that CVE‑2026‑64178, a use‑after‑free bug in the Linux kernel’s Bluetooth bnep module, has been patched. No exploit, PoC, or active exploitation is reported.
00000646
57.8K followersView on X
SecNews@SecNews_GR92d
Patch
CVE-2026-64178: Διόρθωση UAF read στο Bluetooth BNEP του Linux kernel https://secn.ws/f8oDLY
Post summary
A patch has been released addressing a use‑after‑free read vulnerability (CVE‑2026‑64178) in the Linux kernel’s Bluetooth BNEP subsystem.
00000136
7.0K followersView on X

CPE platform detail10 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

10 of 10 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	linux	linux_kernel	-	-	-
OS	linux	linux_kernel	2.6.12	-	-
OS	linux	linux_kernel	2.6.12	-	-
OS	linux	linux_kernel	2.6.12	-	-
OS	linux	linux_kernel	2.6.12	-	-
OS	linux	linux_kernel	2.6.12	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-

Explore more

Back to dashboard linux CVEs linux_kernel vulnerabilities

What researchers are saying

CVE-2026-64178

SecNews[verified]@SecNews_GRPatch

A patch has been released addressing a use‑after‑free read vulnerability (CVE‑2026‑64178) in the Linux kernel’s Bluetooth BNEP subsystem.

Brad Spengler@spendergrsecGeneral

The post simply references CVE announcement links, indicating they are still active, but provides no additional details, evidence of exploitation, fixes, or proof‑of‑concept information.

Infoflowcloud@infoflowcloudPatch

The text announces that CVE-2026-64178, a use‑after‑free vulnerability in the Linux kernel's Bluetooth BNEP subsystem, has been resolved, though no specific patch details are given.

CVE@CVEnewPatch

The advisory confirms that CVE‑2026‑64178, a use‑after‑free bug in the Linux kernel’s Bluetooth bnep module, has been patched. No exploit, PoC, or active exploitation is reported.