Bluetooth LE Controller Vulnerability in Zephyr Software by Zephyr Project

CVE-2026-19740

What is CVE-2026-19740?

The Zephyr Bluetooth LE Controller contains a vulnerability in its Link Layer Control Procedure implementation that retains receive nodes without proper recycling. This flaw allows an attacker to exploit the system by sending crafted PDUs, leading to persistent issues in Bluetooth availability. When the invalid PDU path is taken, the device either asserts due to debug configuration or silently leaks resources, which can exhaust the limited receive pool. This results in a denial of service, crippling Bluetooth functionality until the device is rebooted, without causing memory corruption or exposing sensitive information.

References