There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url
Fix
Patch, vendor advisory and mitigation references on NVD 4
- https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e Patch, Third Party Advisory
- https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e Patch, Third Party Advisory
- https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.5 · linuxNVD modified 2026-10-14 19:16
Affected (CPE criteria) 1
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
References 5
- https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e Patch, Third Party Advisory
- https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e Patch, Third Party Advisory
- https://kernel.dance/#b1a2cd50c0357f243b7435a732b4e62ba3157a2e Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html