Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 17.1%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-46056


Products
Pricing
Contact Us

Shodan ® - All rights reserved