{"schema":"vulnpedia.research/1","cve":"CVE-2026-74540","references":[{"url":"https://git.kernel.org/stable/c/15d6c2367217a6a20b1abae9f38ded716bf620f1","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","url":"https://git.kernel.org/stable/c/15d6c2367217a6a20b1abae9f38ded716bf620f1"},{"source":"nvd","sourceId":"CVE-2026-74540","modified":"2026-10-16T20:17:36.427","url":"https://git.kernel.org/stable/c/15d6c2367217a6a20b1abae9f38ded716bf620f1"}]},{"url":"https://git.kernel.org/stable/c/1818180fe12d6cec7a437bc59cde8efdf6b10250","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","url":"https://git.kernel.org/stable/c/1818180fe12d6cec7a437bc59cde8efdf6b10250"},{"source":"nvd","sourceId":"CVE-2026-74540","modified":"2026-10-16T20:17:36.427","url":"https://git.kernel.org/stable/c/1818180fe12d6cec7a437bc59cde8efdf6b10250"}]},{"url":"https://git.kernel.org/stable/c/8325eafb38c3dee5af329266393763693d17381b","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","url":"https://git.kernel.org/stable/c/8325eafb38c3dee5af329266393763693d17381b"},{"source":"nvd","sourceId":"CVE-2026-74540","modified":"2026-10-16T20:17:36.427","url":"https://git.kernel.org/stable/c/8325eafb38c3dee5af329266393763693d17381b"}]},{"url":"https://git.kernel.org/stable/c/fd4c1e301bdec60a40728ea37de531cbccda501a","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","url":"https://git.kernel.org/stable/c/fd4c1e301bdec60a40728ea37de531cbccda501a"},{"source":"nvd","sourceId":"CVE-2026-74540","modified":"2026-10-16T20:17:36.427","url":"https://git.kernel.org/stable/c/fd4c1e301bdec60a40728ea37de531cbccda501a"}]},{"url":"https://git.kernel.org/stable/c/522b730c62c53a1981604fd73524697fd347830d","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","url":"https://git.kernel.org/stable/c/522b730c62c53a1981604fd73524697fd347830d"},{"source":"nvd","sourceId":"CVE-2026-74540","modified":"2026-10-16T20:17:36.427","url":"https://git.kernel.org/stable/c/522b730c62c53a1981604fd73524697fd347830d"}]},{"url":"https://git.kernel.org/stable/c/58e3c5289ad230a7e24ae4b0c7b43f5ee6e32136","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","url":"https://git.kernel.org/stable/c/58e3c5289ad230a7e24ae4b0c7b43f5ee6e32136"},{"source":"nvd","sourceId":"CVE-2026-74540","modified":"2026-10-16T20:17:36.427","url":"https://git.kernel.org/stable/c/58e3c5289ad230a7e24ae4b0c7b43f5ee6e32136"}]},{"url":"https://git.kernel.org/stable/c/09f447accc2570751e7d17f0dc0788b40d3edade","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","url":"https://git.kernel.org/stable/c/09f447accc2570751e7d17f0dc0788b40d3edade"},{"source":"nvd","sourceId":"CVE-2026-74540","modified":"2026-10-16T20:17:36.427","url":"https://git.kernel.org/stable/c/09f447accc2570751e7d17f0dc0788b40d3edade"}]},{"url":"https://git.kernel.org/stable/c/c4740e7f23ff9a8210198d8b4703259e21b9f69d","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-19T16:38:32.306Z","url":"https://git.kernel.org/stable/c/c4740e7f23ff9a8210198d8b4703259e21b9f69d"},{"source":"nvd","sourceId":"CVE-2026-74540","modified":"2026-10-16T20:17:36.427","url":"https://git.kernel.org/stable/c/c4740e7f23ff9a8210198d8b4703259e21b9f69d"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-74540","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-74540"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517013","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517013"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74540","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-74540"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74540","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74540"}]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081548-CVE-2026-74540-5b1d@gregkh/T","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://lore.kernel.org/linux-cve-announce/2026081548-CVE-2026-74540-5b1d@gregkh/T"}]},{"source":"euvd","sourceId":"EUVD-2026-59733","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-59733","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-59733","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-59733"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_10:kernel","product":"kernel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_10:kernel-abi-stablelists","product":"kernel-abi-stablelists as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-abi-stablelists","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_10:kernel-modules-extra-matched","product":"kernel-modules-extra-matched as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-modules-extra-matched","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_10:kernel-rt-core","product":"kernel-rt-core as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-core","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_10:kernel-uki-virt","product":"kernel-uki-virt as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-uki-virt","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_8:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_8:kernel-modules","product":"kernel-modules as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_8:kernel-rt-modules-extra","product":"kernel-rt-modules-extra as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-modules-extra","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_8:python3-perf","product":"python3-perf as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3-perf","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_9:kernel-64k-devel-matched","product":"kernel-64k-devel-matched as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-64k-devel-matched","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_9:kernel-debug-modules-internal","product":"kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-debug-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_9:kernel-rt-64k","product":"kernel-rt-64k as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-64k","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_9:kernel-rt-64k-modules-core","product":"kernel-rt-64k-modules-core as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-64k-modules-core","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_9:kernel-rt-devel","product":"kernel-rt-devel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-rt-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_9:kernel-zfcpdump","product":"kernel-zfcpdump as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/kernel-zfcpdump","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_9:rv","product":"rv as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The flaw is reachable only through the Bluetooth stack, so it can be mitigated by disabling Bluetooth on systems that do not require it: stop and disable the bluetooth service (systemctl disable --now bluetooth), block the Bluetooth radio with rfkill block bluetooth, or disable Bluetooth in the system firmware. Restricting physical proximity of untrusted Bluetooth peers also limits the attack surface, since the flaw requires an attacker within Bluetooth radio range. For environments where Bluetooth must remain enabled, mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/rv","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_6:kernel","product":"kernel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_6:kernel-debug","product":"kernel-debug as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_6:kernel-devel","product":"kernel-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_6:kernel-headers","product":"kernel-headers as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-headers","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_6:kernel.src","product":"kernel.src as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-abi-whitelists","product":"kernel-abi-whitelists as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-abi-whitelists","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-debug-devel","product":"kernel-debug-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-headers","product":"kernel-headers as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-headers","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-rt","product":"kernel-rt as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-rt-debug-devel","product":"kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-rt-doc","product":"kernel-rt-doc as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-rt-trace-devel","product":"kernel-rt-trace-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-trace-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-tools","product":"kernel-tools as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:kernel-tools-libs-devel","product":"kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools-libs-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]},{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json","productId":"red_hat_enterprise_linux_7:python-perf","product":"python-perf as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python-perf","origins":[{"source":"redhat","sourceId":"CVE-2026-74540","modified":"2026-10-17T21:25:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74540.json"}]}],"vendorCoverage":{"total":275,"shown":32,"omitted":243,"source":"redhat"}}