VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Mar 25, 2026· Updated Jun 17, 2026

CVE-2026-23299

CVE-2026-23299

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: purge error queues in socket destructors

When TX timestamping is enabled via SO_TIMESTAMPING, SKBs may be queued into sk_error_queue and will stay there until consumed. If userspace never gets to read the timestamps, or if the controller is removed unexpectedly, these SKBs will leak.

Fix by adding skb_queue_purge() calls for sk_error_queue in affected bluetooth destructors. RFCOMM does not currently use sk_error_queue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Linux/Kernel4 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.15,<6.18.17
    • cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.15
  • osv-coords
    pkg:linux/kernel
    Range: >= 6.15.0, < 6.18.17

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.