CVE-2026-53254 | Linux Kernel up to 7.0.12 Bluetooth skb_pull_data out-of-bounds

June 25, 2026 Yanac

A vulnerability was found in Linux Kernel up to 7.0.12. It has been rated as critical. Affected is the function skb_pull_data of the component Bluetooth. Performing a manipulation of the argument data results in out-of-bounds read.

This vulnerability is cataloged as CVE-2026-53254. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More