CVE-2026-53208

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth L2CAP implementation where the l2cap sig channel() function in net/bluetooth/l2cap core.c accepts BR/EDR signaling packets up to the channel MTU without enforcing the signaling MTU (MTUsig). This allows a Bluetooth BR/EDR peer within radio range to send a fixed-channel CID 0x0001 packet larger than MTUsig containing multiple L2CAP ECHO REQ commands before pairing. This can force the target system to transmit a large number of ECHO RSP frames in response to a single signaling packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.