CVE-2026-72334

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth ISO handling where malformed ISO END or ISO CONT packets can cause system instability. If a controller sends a malformed sequence such as ISO START followed by an ISO CONT packet that ends the payload, the system leaks conn->rx skb. Additionally, receiving an ISO END packet that is too long triggers a kernel panic during the skb put() function, while packets that are too short are incorrectly accepted. This occurs because the system previously rejected empty ISO CONT and ISO END packets if they were the last in a sequence, contrary to the core specification.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.