CVE Explorer

CVE-2026-53358

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() l2cap_chan_close() removes the channel from conn->chan_l, which must be done under conn->lock. cleanup_listen() runs under the parent sk_lock, so acquiring conn->lock would invert the established conn->lock -> chan->lock -> sk_lock order. Instead of calling l2cap_chan_close() directly, schedule l2cap_chan_timeout with delay 0 to close the channel asynchro

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4913206dbd415856b6354dc9ca3245b7460915c292f9918bec70466eed75c571

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/l2cap_sock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.4"},{"lessThan":"3.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"less…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/l2cap_sock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3634cbdc2eb414b69ffa752ddbe5e0458518e321","status":"affected","version":"3df91ea20e744344100b10ae69a17211fcf5b207","versionType":"git"},{"lessThan":"e1c100e2d61bd8c718b7d91fe3e050780a9bf72d","status":"affected","version":"3df91ea20e744344100b10ae69a17211fcf5b207","versionType":"git"},{"lessThan":"deb8493a8fa599f6c95e2465b12bfdfb7f94a1d9","status":"affected","version":"3df91ea20e744344100…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/3634cbdc2eb414b69ffa752ddbe5e0458518e321"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/50dfec218808b148ab4247b1858031b7a32015c5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/7555fd885a0603f50e49a655850a1f2bd8a25398"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/859d3ace791ed878ae9ba5522c7844d960da8f88"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/89dec92041717b027216e110599e4f6d6c921b79"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/8c8e620467a7b51562dbcefbd1f09f288d7d710d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/deb8493a8fa599f6c95e2465b12bfdfb7f94a1d9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/e1c100e2d61bd8c718b7d91fe3e050780a9bf72d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6b42a65c364fae83348042d56e160bc4eb58c7ea786db1139f964838b3a178c · sha256:e7b0d18bbaf80314… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer