Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-63991

Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() The skb_clone() function can return NULL if memory allocation fails. send_mcast_pkt() calls skb_clone() without checking the return value, which can lead to a NULL pointer dereference in send_pkt() when it dereferences skb->data. Add a NULL check after skb_clone() and skip the peer if the clone fails.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 18722c247023035b9e2e2a08a887adec2a9a6e49 to < 9afcb5ea080af13aab37930da627db43bd277665affected
  • 18722c247023035b9e2e2a08a887adec2a9a6e49 to < 9903a04becf059e44cccf625e23689b7d4378384affected
  • 18722c247023035b9e2e2a08a887adec2a9a6e49 to < d630c4b25f36e0e68461561e4c70957ec37fdeddaffected
  • 18722c247023035b9e2e2a08a887adec2a9a6e49 to < b06203ac5f12929d79146bb9f063c2af1d679e63affected
  • 18722c247023035b9e2e2a08a887adec2a9a6e49 to < 3d5d81d294ba09487c86bc4ba33dc4a4bec5d215affected
  • 18722c247023035b9e2e2a08a887adec2a9a6e49 to < e673889a35a5e4c586d0fae67d8755ca4367d3e2affected
  • 18722c247023035b9e2e2a08a887adec2a9a6e49 to < 2061d080a013c0ec0a56162cd501fb36d2befc26affected
  • 18722c247023035b9e2e2a08a887adec2a9a6e49 to < 3c40d381ce04f9575a5d8b542898183c3b4b38dcaffected

Linux Linux

Default version status: affected

  • 3.14affected
  • 0 to < 3.14unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References