PT-2026-116676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read can occur in the Bluetooth L2CAP implementation. The l2cap data rcv function unpacks a two-byte or four-byte control field without verifying its presence, which can...

PT-2026-128629

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate frame length before control and FCS access l2cap data rcv unpacks either a two-byte or four-byte control field without first ensuring that it is present. A short ERTM or streaming-mode frame can therefo...