Bluetooth Protocol L2CAP Vulnerability in Linux Kernel

CVE-2026-43062

What is CVE-2026-43062?

A vulnerability in the Bluetooth L2CAP protocol within the Linux kernel can lead to type confusion in packets. Specifically, the function l2cap_ecred_reconf_rsp() incorrectly casts incoming data to a type that accommodates a larger structure than intended. This misalignment results in valid L2CAP_ECRED_RECONF_RSP packets being improperly rejected and leads to potential data inconsistencies, as correct results may not be read from the expected offset in the data structure. A proper type usage fix has been implemented to resolve these issues, ensuring that data is handled correctly.

References