CVE-2026-11893

The CVE concerns Bouffalo Lab on‑chip BLE controllers (BL60x/BL70x/BL61x) with Zephyr’s Bluetooth HCI, where bt_bflb_send() in hci_bflb.c violates the bt_hci_driver_api.send() buffer-ownership contract. On error, the driver unrefs the buffer, but the host TX path (send_buf() in subsys/bluetooth/h...