Bluetooth RFCOMM Vulnerability in Linux Kernel

CVE-2026-53256

What is CVE-2026-53256?

A vulnerability has been identified in the Bluetooth RFCOMM implementation of the Linux kernel, involving improper handling of listener sockets during the connection process. Specifically, the flaw lies in the function rfcomm_get_sock_by_channel(), which retrieves a listener socket and drops the associated lock without maintaining a reference. This issue can be exploited in race conditions where a listener may be closed concurrently, leading to potential memory corruption and slab-use-after-free scenarios. To mitigate this, it is essential to ensure proper locking and reference counting around socket operations.

References