Bluetooth BNEP Vulnerability in Linux Kernel

CVE-2026-53253

What is CVE-2026-53253?

A vulnerability in the Bluetooth Network Encapsulation Protocol (BNEP) of the Linux kernel allows malicious entities to send short BNEP Service Data Units (SDUs), leading to potential buffer overflow scenarios. Specifically, the bnep_rx_frame() function reads packet type bytes and control opcodes without verifying the presence of data, which can result in dereferencing null pointers. This vulnerability affects control payload handling, where improper reading and parsing of data structures can be exploited, resulting in system instability or unexpected behaviors.

References