Bluetooth L2CAP Channel Closure Issue in Linux Kernel

CVE-2026-53358

What is CVE-2026-53358?

A vulnerability in the Linux Kernel affects Bluetooth L2CAP channel management. The issue arises during the cleanup of listening channels when the channel closure function is not executed correctly under the expected lock hierarchy. Instead of closing the channel directly, the system schedules a timeout to manage closure asynchronously, maintaining the correct locking order. This prevents potential deadlocks and ensures safe channel termination. Proper handling of the channel connection state is crucial, especially as the L2CAP connection processes channels and cleans up resources.

References