CVE-2026-64126 | Linux Kernel up to 7.0.10 Bluetooth Mgmt add_ext_adv_data adv_data_len/scan_rsp_len out-of-bounds

July 19, 2026 Yanac

A vulnerability identified as critical has been detected in Linux Kernel up to 7.0.10. The impacted element is the function add_ext_adv_data of the component Bluetooth Mgmt. Performing a manipulation of the argument adv_data_len/scan_rsp_len results in out-of-bounds read.

This vulnerability is reported as CVE-2026-64126. The attack requires a local approach. No exploit exists.VulDB Recent EntriesRead More