CVE-2026-19937

The Bluetooth Mesh Access layer in Zephyr RTOS (specifically subsys/bluetooth/mesh/delayable_msg.c) contains a resource leak vulnerability. The bt_mesh_delayable_msg_manage() function fails to correctly re-insert a message context into the pool during a chunk-exhaustion error path, causing the co...