SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63974

HIGH · CVSS 8.8 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the Bluetooth subsystem, specifically during the device closure process, which could lead to queuing timeouts. This issue poses a high risk as it may allow for denial-of-service conditions, impacting system stability. Organizations utilizing Linux systems with Bluetooth capabilities should prioritize patching this vulnerability to mitigate potential disruptions.

CVE
CVE-2026-63974
Severity
HIGH
CVSS
8.8
EPSS
0.32%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Since hci_dev_close_sync() can now be called during the reset path, we should also set HCI_CMD_DRAIN_WORKQUEUE. This avoids queuing timeouts while the hdev workqueue is being drained.