EUVD-2026-81948

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hciconn when a second LE connect is rejected createleconncomplete decides whether the failed connection is still pending by comparing it against hcilookupleconnect, which returns the first LE connection ...

PT-2026-94435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth subsystem where an hci conn is leaked when a second Low Energy LE connection attempt is rejected. This occurs because the create le conn complete functio...

Astra Linux – Vulnerability in Linux 5.10, Linux

There are use-after-free vulnerabilities in the net/bluetooth/l2capcore.c files, specifically in the l2capconnect and l2capleconnectreq functions. These vulnerabilities may allow code execution and the leakage of kernel memory remotely via Bluetooth. A remote attacker can execute code that leaks...

PT-2026-72992

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth L2CAP implementation. The function l2cap le connect rsp retrieves a channel using l2cap get chan by ident but fails to hold a reference or...

kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c

A use-after-free flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capconnect and l2capleconnectreq functions. An attacker with physical access within the range of standard Bluetooth transmission could...

Vulnerability of the l2cap_connect and l2cap_le_connect_req functions (net/bluetooth/l2cap_core.c) in Linux kernel, allowing a hacker to execute arbitrary code

The vulnerability of the l2capconnect and l2capleconnectreq functions net/bluetooth/l2capcore.c in Linux kernel systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...