CVE-2026-90088

CVE-2026-90088 affects the Linux kernel Bluetooth RFCOMM subsystem. The function rfcomm_apply_pn() accepts an MTU value from a remote Parameter Negotiation (PN) frame without validating it against zero. When a remote peer sends an MTU of zero, the sendmsg path enters an infinite loop during data ...