Bluetooth Vulnerability in Linux Kernel Affecting Memory Management

CVE-2026-63991

What is CVE-2026-63991?

In the Linux kernel, a vulnerability related to Bluetooth functionality has been identified where the skb_clone() function can return NULL due to memory allocation failures. This scenario occurs within the send_mcast_pkt() function, which inadequately checks the return value of skb_clone(). If a NULL result is returned, it leads to potential dereferencing issues in send_pkt(), causing instability. Mitigating this vulnerability involves adding proper NULL checks to ensure that processing skips the affected peer if the memory cloning fails, enhancing overall system reliability.

References