CVE WATCH / VULNERABILITY DETAIL

CVE-2026-99239

HIGHCVSS 7.8NVD feed

Published 2 November 2026 · tracked since 3 November 2026

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn l2cap_chan may be linked to l2cap_conn at most once. This is assumed in several places, eg l2cap_chan_del cleanup. There is a TOCTOU race where the invariant is v

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools