01 Record

CVE-2026-80819

Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 9.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-04 15:13Z1 MO AGO

Last updated

2026-10-19 08:44Z10 DAYS AGO

Reserved

2026-08-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

e0c9a634faa20611684ebc2d5beb14306605bcece3bbd1d1be19013904e875cc

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxbb23c0ab824653be4aa7dfca15b07b3059717004 to < d8d686dd5662a7c4745e4515f1237a9f3b7df181, bb23c0ab824653be4aa7dfca15b07b3059717004 to < eb71d5a1ea8ff2683e394b48ae3cd676037ab4c2, bb23c0ab824653be4aa7dfca15b07b3059717004 to < 56f0aa75c7640e46397ef73bea251fcbef9150c0, bb23c0ab824653be4aa7dfca15b07b3059717004 to < 362726c9c6e56eea4262109183e49868c39ccd3a, bb23c0ab824653be4aa7dfca15b07b3059717004 to < 825b95561d7b7c393df9e7bc295451aaeadc3d18, bb23c0ab824653be4aa7dfca15b07b3059717004 to < d4b1a13b1eff2e80925c7368ffdeaaa50cba93df, bb23c0ab824653be4aa7dfca15b07b3059717004 to < 355bfd57ca4ca881c6eb03ca813b440a094b1f44, bb23c0ab824653be4aa7dfca15b07b3059717004 to < b405c2f96ae2e37375105881890f7738833b1d62, bb23c0ab824653be4aa7dfca15b07b3059717004 to < 43a556b2fd43f2df6dded59c2e26560a27874c24, 2.6.30—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d8d686dd5662a7c4745e4515f1237a9f3b7df181
git.kernel.orghttps://git.kernel.org/stable/c/eb71d5a1ea8ff2683e394b48ae3cd676037ab4c2
git.kernel.orghttps://git.kernel.org/stable/c/56f0aa75c7640e46397ef73bea251fcbef9150c0
git.kernel.orghttps://git.kernel.org/stable/c/362726c9c6e56eea4262109183e49868c39ccd3a
git.kernel.orghttps://git.kernel.org/stable/c/825b95561d7b7c393df9e7bc295451aaeadc3d18
git.kernel.orghttps://git.kernel.org/stable/c/d4b1a13b1eff2e80925c7368ffdeaaa50cba93df
git.kernel.orghttps://git.kernel.org/stable/c/355bfd57ca4ca881c6eb03ca813b440a094b1f44
git.kernel.orghttps://git.kernel.org/stable/c/b405c2f96ae2e37375105881890f7738833b1d62
git.kernel.orghttps://git.kernel.org/stable/c/43a556b2fd43f2df6dded59c2e26560a27874c24

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.107-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.