THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-53071 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock(). Every other l2cap_chan_del() caller in the file acquires the

[NVD] CVE-2026-53071 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock(). Every other l2cap_chan_del() caller in the file acquires the

lownvdPublished 2026-06-24

CVE-2026-53071 CVSS: 8.8 HIGH Published: 2026-06-24T17:17:20.843

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp

l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock(). Every other l2cap_chan_del() caller in the file acquires the lock first. A remote BLE device can send a crafted L2C

Indicators of compromise

CVE-2026-53071cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-53071