CVE-2026-53253

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth BNEP implementation where a peer can send a short BNEP Service Discovery Unit (SDU). The function bnep rx frame() reads the packet type byte and, for control packets, reads the control opcode and setup UUID-size byte without first verifying that these bytes are present. Additionally, bnep rx control() dereferences the control opcode without rejecting empty control payloads. This can lead to a KASAN slab-out-of-bounds read, which occurs when the system attempts to read data outside the allocated memory boundary of a slab object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.