CVE-2026-23299 | Linux Kernel up to 6.18.16/6.19.6/7.0-rc1 Bluetooth skb_queue_purge privilege escalation

A vulnerability was found in Linux Kernel up to 6.18.16/6.19.6/7.0-rc1 and classified as critical. Affected by this vulnerability is the function skb_queue_purge of the component Bluetooth. Executing a manipulation can lead to privilege escalation.

This vulnerability is handled as CVE-2026-23299. The attack can only be done within the local network. There is not any exploit available.

It is suggested to upgrade the affected component.