CVE-2026-72336

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the Bluetooth 6LoWPAN implementation. The get l2cap conn() function retrieves an LE hci conn under hdev protection but releases that protection before reading hcon->l2cap data and before the lowpan control write() function dereferences conn->hcon. This creates a race condition where a disconnect or device close operation can tear down the L2CAP connection, leading to a use-after-free when lowpan control write() attempts to access the connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.