Bluetooth Vulnerability in Linux Kernel Affects Connectivity

CVE-2026-99239

What is CVE-2026-99239?

A vulnerability in the Linux kernel's Bluetooth implementation can lead to a race condition involving the L2CAP (Logical Link Control and Adaptation Protocol) channel management. Specifically, the vulnerability arises during the connection process, where improper state management can allow a channel to be added multiple times due to a time-of-check-to-time-of-use (TOCTOU) race. This flaw permits unintended connections, potentially compromising the integrity of Bluetooth communications. The relevant code has undergone modifications to ensure that checks on the channel's state are properly enforced, thereby preventing such vulnerabilities in future interactions.

References