Bluetooth Classic L2CAP Vulnerability in Zephyr Project by Zephyr RTOS

CVE-2026-15460

What is CVE-2026-15460?

A vulnerability in the Bluetooth Classic L2CAP receive handler within the Zephyr Project allows an attacker within radio range to send data PDUs to a channel that has not yet fully established a connection. This occurs because the vulnerable code only checks the destination channel ID without confirming that the channel is in a connected state, exposing it to improper data handling. As a result, this condition can lead to denial of service due to channel teardown or the risk of accessing stale or partially initialized data, which could compromise the integrity of higher-layer protocols. The vulnerability highlights critical weaknesses in channel state management and requires user action to ensure system integrity.

References