Is CVE-2026-23299 actively exploited?

No active exploitation of CVE-2026-23299 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-23299 be exploited remotely?

The attack vector of CVE-2026-23299 has not been classified yet.

What is the CVSS score of CVE-2026-23299?

CVE-2026-23299 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2026-23299

NONE

CVE-2026-23299

Published: March 25, 2026· Updated: Mar 25, 2026

EPSS:0.02%probability of exploitation in 30 daysPercentile:3.9th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: purge error queues in socket destructors

When TX timestamping is enabled via SO_TIMESTAMPING, SKBs may be queued

into sk_error_queue and will stay there until consumed. If userspace never

gets to read the timestamps, or if the controller is removed unexpectedly,

these SKBs will leak.

Fix by adding skb_queue_purge() calls for sk_error_queue in affected

bluetooth destructors. RFCOMM does not currently use sk_error_queue.

NVD Source

Technical Analysis

CVE-2026-23299 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

Affected Vendors & Products

Mentioned vendors (from description):

Linux

CPE data not yet available in NVD for this CVE.

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

All References (3)

→

https://git.kernel.org/stable/c/21e4271e65094172aadd5beb8caea95dd0fbf6d7

→

https://git.kernel.org/stable/c/2b6c942a526635f5c61d2f000258e620da32d3a7

→

https://git.kernel.org/stable/c/3de7c10a950b36affc692d8bd2ac713852580e56

Quick Facts

CVE IDCVE-2026-23299

SeverityNONE

CISA KEVNo

EPSS (30d)0.02%

PublishedMar 25, 2026

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2026-23299 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2026-23299·NVD