CVE-2026-19937 Bluetooth Mesh Access layer permanently leaks delayable-message contexts, disabling all model responses

The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayablemsg.c manages a static pool of CONFIGBTMESHACCESSDELAYABLEMSGCOUNT message contexts default 4 threaded onto a freectx or busyctx list. releasedelayablemsgctx returned a context to freectx only when...

PT-2026-111112

The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable msg.c manages a static pool of CONFIG BT MESH ACCESS DELAYABLE MSG COUNT message contexts default 4 threaded onto a free ctx or busy ctx list. release delayable msg ctx returned a context to free ctx on...