# Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept

CVE record · `CVE-2026-80819`

- **Identifiers:** `CVE-2026-80819`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 4 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 15:13 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before d8d686dd5662a7c4745e4515f1237a9f3b7df181` (git)
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before eb71d5a1ea8ff2683e394b48ae3cd676037ab4c2` (git)
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before 56f0aa75c7640e46397ef73bea251fcbef9150c0` (git)
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before 362726c9c6e56eea4262109183e49868c39ccd3a` (git)
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before 825b95561d7b7c393df9e7bc295451aaeadc3d18` (git)
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before d4b1a13b1eff2e80925c7368ffdeaaa50cba93df` (git)
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before 355bfd57ca4ca881c6eb03ca813b440a094b1f44` (git)
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before b405c2f96ae2e37375105881890f7738833b1d62` (git)
  - affected: `bb23c0ab824653be4aa7dfca15b07b3059717004 to before 43a556b2fd43f2df6dded59c2e26560a27874c24` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `2.6.30`
  - unaffected: `before 2.6.30` (semver)
  - unaffected: `5.10.267 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.218 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.185 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.154 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.106 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.47 to 6.18.*, inclusive` (semver)
  - unaffected: `7.1.11 to 7.1.*, inclusive` (semver)
  - unaffected: `7.2.1 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0019, the 9th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 4 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-80819](https://www.cve.org/CVERecord?id=CVE-2026-80819)
- [NVD: CVE-2026-80819](https://nvd.nist.gov/vuln/detail/CVE-2026-80819)

### References from the CNA

- <https://git.kernel.org/stable/c/d8d686dd5662a7c4745e4515f1237a9f3b7df181>
- <https://git.kernel.org/stable/c/eb71d5a1ea8ff2683e394b48ae3cd676037ab4c2>
- <https://git.kernel.org/stable/c/56f0aa75c7640e46397ef73bea251fcbef9150c0>
- <https://git.kernel.org/stable/c/362726c9c6e56eea4262109183e49868c39ccd3a>
- <https://git.kernel.org/stable/c/825b95561d7b7c393df9e7bc295451aaeadc3d18>
- <https://git.kernel.org/stable/c/d4b1a13b1eff2e80925c7368ffdeaaa50cba93df>
- <https://git.kernel.org/stable/c/355bfd57ca4ca881c6eb03ca813b440a094b1f44>
- <https://git.kernel.org/stable/c/b405c2f96ae2e37375105881890f7738833b1d62>
- <https://git.kernel.org/stable/c/43a556b2fd43f2df6dded59c2e26560a27874c24>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-80819>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-80819/>. Everything for agents: <https://agentprime.io/llms.txt>.