Denial of Service Vulnerability in Bluetooth Classic AVDTP Layer Affecting Zephyr Project

CVE-2026-85036

What is CVE-2026-85036?

A vulnerability exists in the Bluetooth Classic AVDTP layer within the Zephyr Project where improper session handling can lead to a denial of service condition. The issue arises when a session's stream endpoints are not properly released, allowing for an attacker with an encrypted AVDTP signaling channel to exploit a timing window. This can lead to corruption in the system's work queue, causing it to either stop processing tasks entirely or to enter a locked state due to a self-referencing node. The issue can only be mitigated through a dual-commit fix that prevents sessions from being reused while there are pending tasks, ensuring that the device remains operational.

References