CVE-2026-23299: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: purge error queues in socket destructors When TX timestamping is enabled via SO_TIMESTAMPING, SKBs may be queued into sk_error_queue and will stay there until consumed. If userspace never gets to read the timestamps, or if the controller is removed unexpectedly, these SKBs will leak. Fix by adding skb_queue_purge() calls for sk_error_queue in affected bluetooth destructors. RFCOMM does not currently use sk_error_queue.

Засегнати продукти

• Linux Linux: 134f4b39df7b77225a80ef585c15d46f964f5e6f преди 2b6c942a526635f5c61d2f000258e620da32d3a7; 134f4b39df7b77225a80ef585c15d46f964f5e6f преди 3de7c10a950b36affc692d8bd2ac713852580e56; 134f4b39df7b77225a80ef585c15d46f964f5e6f преди 21e4271e65094172aadd5beb8caea95dd0fbf6d7
• Linux Linux: 6.15; преди 6.15; 6.18.17 до 6.18.*; 6.19.7 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23299
• https://nvd.nist.gov/vuln/detail/CVE-2026-23299
• https://git.kernel.org/stable/c/2b6c942a526635f5c61d2f000258e620da32d3a7
• https://git.kernel.org/stable/c/3de7c10a950b36affc692d8bd2ac713852580e56
• https://git.kernel.org/stable/c/21e4271e65094172aadd5beb8caea95dd0fbf6d7