AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

CVE-2026-64127: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecred_reconfigure: send packed pd

infovulnerability

security

Source: NVD/CVE DatabaseJuly 19, 2026CVE-2026-64127

Summary

A bug in the Linux kernel's Bluetooth L2CAP code was sending the wrong data when reconfiguring connections. Instead of sending the actual packet data (6 bytes containing MTU, MPS, and channel ID), the code was sending 8 bytes copied from the kernel's stack memory, which leaked a kernel address to the paired Bluetooth device and broke the reconfiguration feature.

Solution / Mitigation

Pass the full flex-struct size via struct_size(pdu, scid, 1) and the pdu pointer (the struct address) as the source to l2cap_send_cmd(), instead of sizeof(pdu) and &pdu. This restores the original semantics and ensures the correct 6-byte payload is transmitted.

Vulnerability Details

EPSS (30-day exploit probability)

EPSS: 0.0%

Disclosure Date

July 19, 2026

Classification

Attack SophisticationModerate

Monthly digest — independent AI security research

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64127

First tracked: July 19, 2026 at 02:09 PM

Classified by LLM (prompt v3) · confidence: 95%