EUVD-2026-115281

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse l2capchanadd if chan already has conn l2capchan may be linked to l2capconn at most once. This is assumed in several places, eg l2capchandel cleanup. There is a TOCTOU race where the invariant is violated:...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability stems from improper counting checks in l2capchanconnect, which only counts delayed channels. As a result, non-delayed channels may cause the number of ECRED channels to be processed to exceed the maximum value,...