High severity8.8NVD Advisory· Published Jun 24, 2026· Updated Jul 23, 2026
CVE-2026-53071
CVE-2026-53071
Description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock(). Every other l2cap_chan_del() caller in the file acquires the lock first. A remote BLE device can send a crafted L2CAP ECRED reconfiguration response to corrupt the channel list while another thread is iterating it.
Add l2cap_chan_hold() and l2cap_chan_lock() before l2cap_chan_del(), and l2cap_chan_unlock() and l2cap_chan_put() after, matching the pattern used in l2cap_ecred_conn_rsp() and l2cap_conn_del().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
79- osv-coords77 versionspkg:linux/kernelpkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rv
>= 5.7.0, < 5.10.258+ 76 more
- (no CPE)range: >= 5.7.0, < 5.10.258
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.rt7.487.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 4.18.0-553.146.1.el8_10
- (no CPE)range: < 6.12.0-211.37.1.el10_2
- (no CPE)range: < 6.12.0-211.37.1.el10_2
Patches
Vulnerability mechanics
References
15- git.kernel.org/stable/c/0ccd75c51f620374086f359e906917676e699a1cnvdPatch
- git.kernel.org/stable/c/330b20ec97916961ee0e6c29c06bc0fa7c96e64cnvdPatch
- git.kernel.org/stable/c/42776497cdbc9a665b384a6dcb85f0d4bd927eabnvdPatch
- git.kernel.org/stable/c/5501d055a1ce3c747141e3955ba8cf034d193f3envdPatch
- git.kernel.org/stable/c/77a853aec710b2fdf41fa298ea3cbc9a4358f917nvdPatch
- git.kernel.org/stable/c/96dca51715d86559ed6ed8028e5445cecb80f3aenvdPatch
- git.kernel.org/stable/c/dc89961b76f12aff47124c1df4bdb32a080f4d0cnvdPatch
- git.kernel.org/stable/c/fe1188abdae9b7a8199dcdfcf9244d5e5d61eb14nvdPatch
- access.redhat.com/errata/RHSA-2026:42550nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2026:42552nvdThird Party Advisory
- access.redhat.com/security/cve/CVE-2026-53071nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdThird Party Advisory
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53071.jsonnvdThird Party Advisory
- access.redhat.com/errata/RHSA-2026:42919nvd
- access.redhat.com/errata/RHSA-2026:43307nvd
News mentions
0No linked articles in our index yet.