CVE-2026-64206

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock can occur in the Bluetooth L2CAP layer during connection teardown. The function l2cap conn del() acquires the conn->lock mutex and subsequently calls cancel work sync() for pending rx work. Simultaneously, the process pending rx() function attempts to acquire the same conn->lock mutex. This creates a circular locking dependency where the teardown process deadlocks against the worker it is attempting to flush.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.