CVE-2026-31513Published

Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-31513

Published

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "net/bluetooth/l2cap_core.c"
                    ],
                    "versions": [
                        {
                            "version": "935f324e4b2461df2cf7f02b4195082b4304c708",
                            "lessThan": "c8e1a27edb8b4e5afb56b384acd7b6c2dec1b7cc",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "e981a9392800ce2c5bca196a6ab2c55e9370efaa",
                            "lessThan": "5b35f8211a913cfe7ab9d54fa36a272d2059a588",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "f3fdf2e7276a3edc5df55454275da20eac186970",
                            "lessThan": "a3d9c50d69785ae02e153f000da1b5fd6dbfdf1b",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "c28d2bff70444a85b3b86aaf241ece9408c7858c",
                            "lessThan": "9d87cb22195b2c67405f5485d525190747ad5493",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                }

Linux

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "net/bluetooth/l2cap_core.c"
                    ],
                    "versions": [
                        {
                            "version": "6.12.75",
                            "lessThan": "6.12.80",
                            "status": "affected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.18.16",
                            "lessThan": "6.18.21",
                            "status": "affected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.19.6",
                            "lessThan": "6.19.11",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON