CVE-2026-53358

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth L2CAP implementation where calling l2cap chan close() within cleanup listen() causes a lock inversion. Specifically, cleanup listen() operates under the parent sk lock, and attempting to acquire conn->lock to remove a channel from conn->chan l violates the established locking order of conn->lock -> chan->lock -> sk lock. To resolve this, the system schedules l2cap chan timeout with a delay of 0 to close the channel asynchronously, ensuring locks are acquired in the correct sequence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.