Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98108

Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan

CVSS 7.5 HighEPSS 0.0024 · 15th percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:35 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 15f02b91056253e8cdc592888f431da0731337b8 to before ad0f44a3f1f688558ed876a0702bc2c82b0df689 git
  • affected 15f02b91056253e8cdc592888f431da0731337b8 to before 564ae0e05e598aa895b9dbd18cb7d6eb64752869 git
  • affected 15f02b91056253e8cdc592888f431da0731337b8 to before aab17938998b29e75c3324763411aef3e300fc67 git
  • affected 15f02b91056253e8cdc592888f431da0731337b8 to before 0e1fc7cab95ad958e55d70a5dfaaea687c9c639f git
  • affected 15f02b91056253e8cdc592888f431da0731337b8 to before 1074bcc57f741223f9fa82ce6afe5c3d783e4d10 git
  • affected 15f02b91056253e8cdc592888f431da0731337b8 to before 5d5a625cbc854d4c4f68e4b16fcf6e682d9a9ed1 git
  • affected 15f02b91056253e8cdc592888f431da0731337b8 to before 6cb79e6499228cfdbd4b3301371ce74d01cd2f80 git
  • affected 15f02b91056253e8cdc592888f431da0731337b8 to before 4ef05db5b08b176a551b4a6287372045998806b0 git
Other versions: unaffected
Linux Linux
  • affected 5.7
  • unaffected before 5.7 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.111 to 6.12.*, inclusive semver
  • unaffected 6.18.53 to 6.18.*, inclusive semver
  • unaffected 7.2.7 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98108
CNA
Linux
Tags
Published
25 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.5 High 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0024, the 15th percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.