CVE-2026-77685

A vulnerability exists in the Bluetooth Classic RFCOMM multiplexer control-channel handler (rfcomm.c). An integer underflow occurs when processing a malformed BT_RFCOMM_TEST command: if the buf->len is 0, the calculation buf->len - 1 underflows to 255. This causes rfcomm_send_test() to perf...