CVE-2026-92241

In Zephyr RTOS , a deadlock vulnerability exists in the Bluetooth Classic AVRCP browsing channel due to the browsing_avrcp_l2cap_alloc_buf() callback in subsys/bluetooth/host/classic/avrcp.c. The issue arises because the function allocates from the avctp_browsing_rx_pool using K_FOREVER. A connec...