CVE-2026-64539

The CVE-2026-64539 entry documents a Linux kernel Bluetooth issue where eir_create_adv_data() can overflow the stack when prepending a 3-byte Flags AD to advertising data. The root cause is copying adv_data_len bytes after potentially prepending Flags into a fixed 31-byte buffer for legacy advert...