Bluetooth L2CAP Vulnerability in Linux Kernel

CVE-2026-64206

What is CVE-2026-64206?

A vulnerability in the Bluetooth L2CAP component of the Linux kernel can lead to deadlocks when concurrent processes attempt to manage pending work while holding the same mutex. This occurs in particular when the connection teardown process interacts with pending work, causing potential circular locking dependencies. Mitigating this issue involves modifying the order of operations to cancel pending tasks before acquiring necessary locks, which effectively prevents deadlock situations and enhances overall system stability.

References