U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-53071 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock(). Every other l2cap_chan_del() caller in the file acquires the lock first. A remote BLE device can send a crafted L2CAP ECRED reconfiguration response to corrupt the channel list while another thread is iterating it. Add l2cap_chan_hold() and l2cap_chan_lock() before l2cap_chan_del(), and l2cap_chan_unlock() and l2cap_chan_put() after, matching the pattern used in l2cap_ecred_conn_rsp() and l2cap_conn_del().


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://access.redhat.com/security/cve/CVE-2026-53071 redhat-SADP
https://bugzilla.redhat.com/show_bug.cgi?id=2492458 redhat-SADP
https://git.kernel.org/stable/c/0ccd75c51f620374086f359e906917676e699a1c kernel.org
https://git.kernel.org/stable/c/330b20ec97916961ee0e6c29c06bc0fa7c96e64c kernel.org
https://git.kernel.org/stable/c/42776497cdbc9a665b384a6dcb85f0d4bd927eab kernel.org
https://git.kernel.org/stable/c/5501d055a1ce3c747141e3955ba8cf034d193f3e kernel.org
https://git.kernel.org/stable/c/77a853aec710b2fdf41fa298ea3cbc9a4358f917 kernel.org
https://git.kernel.org/stable/c/96dca51715d86559ed6ed8028e5445cecb80f3ae kernel.org
https://git.kernel.org/stable/c/dc89961b76f12aff47124c1df4bdb32a080f4d0c kernel.org
https://git.kernel.org/stable/c/fe1188abdae9b7a8199dcdfcf9244d5e5d61eb14 kernel.org
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53071.json redhat-SADP

Weakness Enumeration

CWE-ID CWE Name Source
CWE-414 Missing Lock Check redhat-SADP  

Change History

3 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-53071
NVD Published Date:
06/24/2026
NVD Last Modified:
06/29/2026
Source:
kernel.org