CVE-2026-90087

CVE-2026-90087 is a Linux kernel Bluetooth (HCI) resource leak affecting the handling of concurrent LE (BLE) connection attempts. When two connections are in BT_CONNECT simultaneously—specifically one on the passive scan path with HCI_CONN_SCANNING set—create_le_conn_complete() may match the wron...