VulnSocial

CVE-2026-64206Disclosure(linux / linux_kernel)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock l2cap_conn_del() takes conn->lock and then calls cancel_work_sync() for pending_rx_work. process_pending_rx() takes the same mutex, so teardown can deadlock against the worker it is flushing. This issue was found by our static analysis tool and then manually reviewed against the current tree. The grounded PoC kept the l2cap_conn_ready() -> queue_work(..., &conn->pending_rx_work) submit path, the l2cap_conn_del() -> cancel_work_sync(&conn->pending_rx_work) teardown path, and the process_pending_rx() -> mutex_lock(&conn->lock) worker edge. Lockdep WARNING: possible circular locking dependency detected process_pending_rx+0x21/0x2a [vuln_msv] l2cap_conn_del.constprop.0+0x3f/0x4e [vuln_msv] *** DEADLOCK *** Cancel pending_rx_work before taking conn->lock, matching the existing lock-before-drain ordering used for the two delayed works in the same teardown path. The pending_rx queue is still purged after the work has been cancelled and conn->lock has been acquired.

linux CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-362

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-07-21); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
linux
Products
linux_kernel

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-21: 2Mentions · 2026-07-22: 1Patch / Workaround · 2026-07-21: 2Technical Details · 2026-07-21: 2Technical Details · 2026-07-22: 107-2107-22
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-07-212
Disclosure1Patch1
2026-07-221
Disclosure1
Full discourse3 posts
  • Windows Forum@windowsforum
    Disclosure

    🛡️ Linux Bluetooth found a new way to fail: a teardown deadlock can leave connections stuck indefinitely. Windows’ native stack is unaffected—one fewer reason to blame Redmond for pairing pain. https://windowsforum.com/threads/cve-2026-64206-linux-bluetooth-deadlock-fix-windows-unaffected.439971/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #BluetoothSecurity #CveVulnerability https://t.co/W3aesIuuPP

    Post summary

    The tweet announces CVE-2026-64206—a teardown deadlock flaw that stalls Linux Bluetooth connections, noting that the Windows stack remains unaffected.

    0000025
    1.3K followersView on X
  • TECHEPAGES@techepages
    Patch

    🚨 Linux kernel patched 400+ vulnerabilities in ~24 hours (July 19-20). Key CVEs to know: 🔹 CVE-2026-64187 – XFS recovery failure 🔹 CVE-2026-64206 – Bluetooth L2CAP locking issue 🔹 CVE-2026-64192 – BPF inode-storage map flaw 🔹 CVE-2026-64188 – UAF in Qualcomm RMNET driver 🔹 CVE-2026-64122 – UAF in mlx5e network driver Patch now if you're exposed. 🧵

    Post summary

    Linux kernel released a patch addressing 400+ CVEs, including several highlighted ones, and urges users to update immediately.

    0000058
    29 followersView on X
  • TECHEPAGES@techepages
    Disclosure

    🚨 New Linux kernel CVEs disclosed (July 19-20): deadlocks, livelocks & NULL pointer crashes across XFS, Bluetooth L2CAP, netfilter, and networking subsystems. Standouts: 🔹 CVE-2026-64206: Bluetooth teardown deadlock 🔹 CVE-2026-64187: XFS log recovery corruption 🔹 CVE-2026-64207: net/sched livelock risk No public exploits yet, but low-complexity local bugs = privesc chaining risk in multi-tenant/container setups. Patch your LTS kernels.

    Post summary

    Three new Linux kernel CVEs (CVE-2026-64206, CVE-2026-64187, CVE-2026-64207) affecting Bluetooth, XFS, and netfilter subsystems have been disclosed with no public exploits, but patches are recommended for LTS kernels.

    0000080
    29 followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel3.16--
OSlinuxlinux_kernel3.16--
OSlinuxlinux_kernel3.16--
OSlinuxlinux_kernel3.16--
OSlinuxlinux_kernel3.16--
OSlinuxlinux_kernel3.16--
OSlinuxlinux_kernel7.2--
OSlinuxlinux_kernel7.2--

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities