Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2026-63946

8.8 · HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv_frame reads conn->sk under iso_conn_lock but releases the lock before using…

Published Jul 19, 2026EPSS 0.34%

Overview

CVE-2026-63946 is a high-severity vulnerability. It was published on July 19, 2026 and has a CVSS 3.1 base score of 8.8 (HIGH).

This vulnerability has a CVSS 3.1 base score of 8.8, rated HIGH. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: fix UAF in iso_recv_frame

iso_recv_frame reads conn->sk under iso_conn_lock but releases the lock

before using sk, with no reference held. A concurrent iso_sock_kill()

can free sk in that window, causing use-after-free on sk->sk_state and

sock_queue_rcv_skb().

Fix by replacing the bare pointer read with iso_sock_hold(conn), which

calls sock_hold() while the spinlock is held, atomically elevating the

refcount before the lock drops. Add a drop_put label so sock_put() is

called on all exit paths where the hold succeeded.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/119fb6f80c44dc1c65d604cf28e64c56bd9b6568Refgit.kernel.org/stable/c/1a6b803b00ccdd7666506adbe01ddae1c72d1ca9Refgit.kernel.org/stable/c/47f23a259517abbdb8032c057a1e8a6bf3734878Refgit.kernel.org/stable/c/b04ec131325baf4ea4577d6c6e6b86cf092e3731Refgit.kernel.org/stable/c/c318aa51830a3d2cc1229968fe521441c97356cdRefgit.kernel.org/stable/c/c57ea90f203c8b8b41a474f19a09000d0f841436

How CyberStrike helps

Frequently asked questions

What is CVE-2026-63946?

CVE-2026-63946 is a high-severity vulnerability. It was published on July 19, 2026 and has a CVSS 3.1 base score of 8.8 (HIGH).

How severe is CVE-2026-63946?

This vulnerability has a CVSS 3.1 base score of 8.8, rated HIGH. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.

How do I fix or remediate CVE-2026-63946?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-63946?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2026-63946 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related HIGH CVEs from 2026

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999