CVE-2026-19740

The Zephyr software Bluetooth LE Controller contains a vulnerability in its Link Layer Control Procedure (LLCP) implementation. Specifically, the functions llcp_lp_pu_rx() and llcp_rp_pu_rx() in subsys/bluetooth/controller/ll_sw/ull_llcp_phy.c fail to release a retained receive node when processi...