# Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb

CVE record · `CVE-2026-93209`

- **Identifiers:** `CVE-2026-93209`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 24 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 24 Sept 2026, 15:10 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `da77c1d39bc527b31890bfa0405763c82828defb to before 0337fb092873a4146aa854acb554675b49c8f6b5` (git)
  - affected: `2af7aa6685e22d0dc546b0d27e5f16d3afe211fa to before d5eef0747071934a1c080ee617fa4fd3566394c5` (git)
  - affected: `2615fd9a7c2507eb3be3fbe49dcec88a2f56454a to before d7723320db4c9cb9ec2b9a36140e6c641dd77814` (git)
  - affected: `2615fd9a7c2507eb3be3fbe49dcec88a2f56454a to before d0b28e9655f4b3195210627577f81883dc1d0162` (git)
  - affected: `2615fd9a7c2507eb3be3fbe49dcec88a2f56454a to before 26f66d5b8a5663af498f7ccc94fc79fb47a2191f` (git)
  - affected: `2615fd9a7c2507eb3be3fbe49dcec88a2f56454a to before f5afdff569a09d1cb8cf19826199d024725576cb` (git)
  - affected: `4ff121be63b761950610f422437aaaef8e075c40` (git)
  - affected: `18a4c59af609994552c8b39c5438304e070e55c7` (git)
  - affected: `6.1.83 to before 6.1.118` (semver)
  - affected: `6.6.23 to before 6.6.157` (semver)
  - affected: `6.7.11 to before 6.8` (semver)
  - affected: `6.8.2 to before 6.9` (semver)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.9`
  - unaffected: `before 6.9` (semver)
  - unaffected: `6.1.118 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.109 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.50 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.4 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0017, the 6th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 24 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-93209](https://www.cve.org/CVERecord?id=CVE-2026-93209)
- [NVD: CVE-2026-93209](https://nvd.nist.gov/vuln/detail/CVE-2026-93209)

### References from the CNA

- <https://git.kernel.org/stable/c/0337fb092873a4146aa854acb554675b49c8f6b5>
- <https://git.kernel.org/stable/c/d5eef0747071934a1c080ee617fa4fd3566394c5>
- <https://git.kernel.org/stable/c/d7723320db4c9cb9ec2b9a36140e6c641dd77814>
- <https://git.kernel.org/stable/c/d0b28e9655f4b3195210627577f81883dc1d0162>
- <https://git.kernel.org/stable/c/26f66d5b8a5663af498f7ccc94fc79fb47a2191f>
- <https://git.kernel.org/stable/c/f5afdff569a09d1cb8cf19826199d024725576cb>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-93209>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-93209/>. Everything for agents: <https://agentprime.io/llms.txt>.