Denial of Service Vulnerability in Zephyr Bluetooth SDP Parser

CVE-2026-10651

What is CVE-2026-10651?

A vulnerability exists in the Zephyr RTOS Bluetooth Classic SDP parser, where a malformed SDP attribute can lead to a denial of service condition. The issue arises when the bt_sdp_parse_attribute() function accepts an insufficiently short input buffer, causing the system to trigger an assertion failure. This can lead to a kernel panic in builds with assertions enabled, while builds without assertions may continue parsing, resulting in out-of-bounds reads and unpredictable behavior. It is crucial for users to apply the latest updates to mitigate this risk.

References