Bluetooth Vulnerability in Linux Kernel Affecting Multiple Distributions

CVE-2026-53255

What is CVE-2026-53255?

A vulnerability exists within the Linux kernel's Bluetooth management that may allow a malformed advertising data request to lead to out-of-bounds read operations. Specifically, the function tlv_data_is_valid() improperly validates the length of advertising data fields, enabling processing of an invalid request to access memory beyond allocated boundaries. This flaw can be triggered by an attacker sending a crafted MGMT_OP_ADD_ADVERTISING command, potentially leading to unauthorized access or system instability. Developers should ensure that robust validity checks are in place to prevent such exploitation.

References