# Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan

CVE record · `CVE-2026-98108`

- **Identifiers:** `CVE-2026-98108`
- **State:** Confirmed
- **Severity:** CVSS 7.5 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 25 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:35 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `15f02b91056253e8cdc592888f431da0731337b8 to before ad0f44a3f1f688558ed876a0702bc2c82b0df689` (git)
  - affected: `15f02b91056253e8cdc592888f431da0731337b8 to before 564ae0e05e598aa895b9dbd18cb7d6eb64752869` (git)
  - affected: `15f02b91056253e8cdc592888f431da0731337b8 to before aab17938998b29e75c3324763411aef3e300fc67` (git)
  - affected: `15f02b91056253e8cdc592888f431da0731337b8 to before 0e1fc7cab95ad958e55d70a5dfaaea687c9c639f` (git)
  - affected: `15f02b91056253e8cdc592888f431da0731337b8 to before 1074bcc57f741223f9fa82ce6afe5c3d783e4d10` (git)
  - affected: `15f02b91056253e8cdc592888f431da0731337b8 to before 5d5a625cbc854d4c4f68e4b16fcf6e682d9a9ed1` (git)
  - affected: `15f02b91056253e8cdc592888f431da0731337b8 to before 6cb79e6499228cfdbd4b3301371ce74d01cd2f80` (git)
  - affected: `15f02b91056253e8cdc592888f431da0731337b8 to before 4ef05db5b08b176a551b4a6287372045998806b0` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.7`
  - unaffected: `before 5.7` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.111 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.53 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.7 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.5 High, CVSS 3.1: `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0024, the 15th percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98108](https://www.cve.org/CVERecord?id=CVE-2026-98108)
- [NVD: CVE-2026-98108](https://nvd.nist.gov/vuln/detail/CVE-2026-98108)

### References from the CNA

- <https://git.kernel.org/stable/c/ad0f44a3f1f688558ed876a0702bc2c82b0df689>
- <https://git.kernel.org/stable/c/564ae0e05e598aa895b9dbd18cb7d6eb64752869>
- <https://git.kernel.org/stable/c/aab17938998b29e75c3324763411aef3e300fc67>
- <https://git.kernel.org/stable/c/0e1fc7cab95ad958e55d70a5dfaaea687c9c639f>
- <https://git.kernel.org/stable/c/1074bcc57f741223f9fa82ce6afe5c3d783e4d10>
- <https://git.kernel.org/stable/c/5d5a625cbc854d4c4f68e4b16fcf6e682d9a9ed1>
- <https://git.kernel.org/stable/c/6cb79e6499228cfdbd4b3301371ce74d01cd2f80>
- <https://git.kernel.org/stable/c/4ef05db5b08b176a551b4a6287372045998806b0>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98108>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98108/>. Everything for agents: <https://agentprime.io/llms.txt>.