{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "18722c247023035b9e2e2a08a887adec2a9a6e49"
            },
            {
              "fixed": "9afcb5ea080af13aab37930da627db43bd277665"
            },
            {
              "fixed": "9903a04becf059e44cccf625e23689b7d4378384"
            },
            {
              "fixed": "d630c4b25f36e0e68461561e4c70957ec37fdedd"
            },
            {
              "fixed": "b06203ac5f12929d79146bb9f063c2af1d679e63"
            },
            {
              "fixed": "3d5d81d294ba09487c86bc4ba33dc4a4bec5d215"
            },
            {
              "fixed": "e673889a35a5e4c586d0fae67d8755ca4367d3e2"
            },
            {
              "fixed": "2061d080a013c0ec0a56162cd501fb36d2befc26"
            },
            {
              "fixed": "3c40d381ce04f9575a5d8b542898183c3b4b38dc"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.14.0"
            },
            {
              "fixed": "5.10.259"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.210"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.176"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.143"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.93"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.35"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.0.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63991.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()\n\nThe skb_clone() function can return NULL if memory allocation fails.\nsend_mcast_pkt() calls skb_clone() without checking the return value, which\ncan lead to a NULL pointer dereference in send_pkt() when it dereferences\nskb-\u003edata.\nAdd a NULL check after skb_clone() and skip the peer if the clone fails.",
  "id": "CVE-2026-63991",
  "modified": "2026-07-21T03:42:13.424421904Z",
  "published": "2026-07-19T14:56:11.824Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2061d080a013c0ec0a56162cd501fb36d2befc26"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3c40d381ce04f9575a5d8b542898183c3b4b38dc"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3d5d81d294ba09487c86bc4ba33dc4a4bec5d215"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9903a04becf059e44cccf625e23689b7d4378384"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9afcb5ea080af13aab37930da627db43bd277665"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b06203ac5f12929d79146bb9f063c2af1d679e63"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d630c4b25f36e0e68461561e4c70957ec37fdedd"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e673889a35a5e4c586d0fae67d8755ca4367d3e2"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63991.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63991"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.8.0",
  "summary": "Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()"
}