Bluetooth Vulnerability in Linux Kernel Affecting Multiple Versions

CVE-2026-31512

What is CVE-2026-31512?

A vulnerability exists in the Bluetooth implementation of the Linux kernel, specifically within the L2CAP function. The function l2cap_ecred_data_rcv() fails to validate the length of the Protocol Data Unit (PDU) before reading the Service Data Unit (SDU) length. This oversight could lead to out-of-bounds read operations when the size of the socket buffer (skb) is less than the expected length, potentially allowing for the exploitation of memory corruption vulnerabilities. The issue has been rectified by implementing necessary checks to validate skb length prior to access, ensuring robust protection against such attacks.

References