CVE-2026-53071

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Bluetooth Logical Link Control and Adaptation Protocol (L2CAP) implementation. A remote Bluetooth Low Energy (BLE) device can trigger the issue by sending a specially crafted L2CAP ECRED reconfiguration response. The problem occurs because the function l2cap ecred reconf rsp() calls l2cap chan del() without holding the l2cap chan lock(), which is a mechanism used to synchronize access to the channel list. This missing lock can lead to corruption of the channel list while another thread is iterating through it, potentially resulting in a Denial of Service (DoS) that makes the system unstable or unresponsive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.