PT-2026-61292

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap ecred conn rsp If dcid is received for an already-assigned destination CID the spec requires that both channels to be discarded, but calling l2cap chan del may invalidate the tmp curs...

CVE-2026-53358

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels in cleanuplisten l2capchanclose removes the channel from conn-chanl, which must be done under conn-lock. cleanuplisten runs under the parent sklock, so acquiring conn-lock would...

PT-2026-55235

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where calling l2cap chan close within cleanup listen causes a lock inversion. Specifically, cleanup listen operates under the parent...