CVE-2026-63991
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() The skb_clone() function can return NULL if memory allocation fails. send_mcast_pkt() calls skb_clone() without checking the return value, which can lead to a NULL pointer dereference in send_pkt() when it dereferences skb->data. Add a NULL check after skb_clone() and skip the peer if the clone fails.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 18722c247023035b9e2e2a08a887adec2a9a6e49 | affected | git | 9afcb5ea080af13aab37930da627db43bd277665 | Unavailable | None listed |
| 18722c247023035b9e2e2a08a887adec2a9a6e49 | affected | git | 9903a04becf059e44cccf625e23689b7d4378384 | Unavailable | None listed |
| 18722c247023035b9e2e2a08a887adec2a9a6e49 | affected | git | d630c4b25f36e0e68461561e4c70957ec37fdedd | Unavailable | None listed |
| 18722c247023035b9e2e2a08a887adec2a9a6e49 | affected | git | b06203ac5f12929d79146bb9f063c2af1d679e63 | Unavailable | None listed |
| 18722c247023035b9e2e2a08a887adec2a9a6e49 | affected | git | 3d5d81d294ba09487c86bc4ba33dc4a4bec5d215 | Unavailable | None listed |
| 18722c247023035b9e2e2a08a887adec2a9a6e49 | affected | git | e673889a35a5e4c586d0fae67d8755ca4367d3e2 | Unavailable | None listed |
| 18722c247023035b9e2e2a08a887adec2a9a6e49 | affected | git | 2061d080a013c0ec0a56162cd501fb36d2befc26 | Unavailable | None listed |
| 18722c247023035b9e2e2a08a887adec2a9a6e49 | affected | git | 3c40d381ce04f9575a5d8b542898183c3b4b38dc | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.14 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.14 | Unavailable | None listed |
| 5.10.259 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.210 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.176 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.143 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.93 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.35 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.0.12 | unaffected | semver | Unavailable | 7.0.* | None listed |
| 7.1 | unaffected | original_commit_for_fix | Unavailable | * | None listed |