CVE record · CVE-2026-80819

Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept

No CVSS scoreEPSS 0.0019 · 9th percentile

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 15:13 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before d8d686dd5662a7c4745e4515f1237a9f3b7df181 git
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before eb71d5a1ea8ff2683e394b48ae3cd676037ab4c2 git
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before 56f0aa75c7640e46397ef73bea251fcbef9150c0 git
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before 362726c9c6e56eea4262109183e49868c39ccd3a git
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before 825b95561d7b7c393df9e7bc295451aaeadc3d18 git
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before d4b1a13b1eff2e80925c7368ffdeaaa50cba93df git
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before 355bfd57ca4ca881c6eb03ca813b440a094b1f44 git
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before b405c2f96ae2e37375105881890f7738833b1d62 git
  • affected bb23c0ab824653be4aa7dfca15b07b3059717004 to before 43a556b2fd43f2df6dded59c2e26560a27874c24 git
Other versions: unaffected
Linux Linux
  • affected 2.6.30
  • unaffected before 2.6.30 semver
  • unaffected 5.10.267 to 5.10.*, inclusive semver
  • unaffected 5.15.218 to 5.15.*, inclusive semver
  • unaffected 6.1.185 to 6.1.*, inclusive semver
  • unaffected 6.6.154 to 6.6.*, inclusive semver
  • unaffected 6.12.106 to 6.12.*, inclusive semver
  • unaffected 6.18.47 to 6.18.*, inclusive semver
  • unaffected 7.1.11 to 7.1.*, inclusive semver
  • unaffected 7.2.1 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-80819
CNA
Linux
Published
4 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0019, the 9th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 4 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.