Use After Free Vulnerability in Linux Kernel Bluetooth Stack

CVE-2026-53357

What is CVE-2026-53357?

A use-after-free vulnerability in the Bluetooth implementation of the Linux kernel could allow an attacker to exploit the l2cap_sock_cleanup_listen function. This occurs when a concurrent HCI disconnect triggers l2cap_conn_del while a listening socket is being cleaned up, potentially leading to kernel memory corruption. The vulnerability allows for unprivileged socket manipulation and has been observed to produce multiple use-after-free reports under specific racing conditions. It is crucial for system administrators and developers to update their Linux kernel versions to mitigate the risks associated with this vulnerability.

References