CVE record · CVE-2026-93209

Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb

No CVSS scoreEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: Linux) at 24 Sept 2026, 15:10 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected da77c1d39bc527b31890bfa0405763c82828defb to before 0337fb092873a4146aa854acb554675b49c8f6b5 git affected 2af7aa6685e22d0dc546b0d27e5f16d3afe211fa to before d5eef0747071934a1c080ee617fa4fd3566394c5 git affected 2615fd9a7c2507eb3be3fbe49dcec88a2f56454a to before d7723320db4c9cb9ec2b9a36140e6c641dd77814 git affected 2615fd9a7c2507eb3be3fbe49dcec88a2f56454a to before d0b28e9655f4b3195210627577f81883dc1d0162 git affected 2615fd9a7c2507eb3be3fbe49dcec88a2f56454a to before 26f66d5b8a5663af498f7ccc94fc79fb47a2191f git affected 2615fd9a7c2507eb3be3fbe49dcec88a2f56454a to before f5afdff569a09d1cb8cf19826199d024725576cb git affected 4ff121be63b761950610f422437aaaef8e075c40 git affected 18a4c59af609994552c8b39c5438304e070e55c7 git affected 6.1.83 to before 6.1.118 semver affected 6.6.23 to before 6.6.157 semver affected 6.7.11 to before 6.8 semver affected 6.8.2 to before 6.9 semver Other versions: unaffected
Linux	Linux	affected 6.9 unaffected before 6.9 semver unaffected 6.1.118 to 6.1., inclusive semver unaffected 6.6.157 to 6.6., inclusive semver unaffected 6.12.109 to 6.12., inclusive semver unaffected 6.18.50 to 6.18., inclusive semver unaffected 7.2.4 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-93209
CNA: Linux
Tags: Linux kernel
Published: 24 Sept 2026
Updated: 19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0017, the 6th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 24 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.