CVE-2026-64403 | Linux Kernel up to 7.2-rc2 Bluetooth L2CAP l2cap_get_conf_opt len/val out-of-bounds

A vulnerability described as critical has been identified in Linux Kernel up to 7.2-rc2. The impacted element is the function l2cap_get_conf_opt of the component Bluetooth L2CAP. Such manipulation of the argument len/val leads to out-of-bounds read.

This vulnerability is uniquely identified as CVE-2026-64403. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More