CVE-2026-23299

A flaw was found in the Linux kernel's Bluetooth subsystem. When transmit (TX) timestamping is enabled, socket kernel buffers (SKBs) can accumulate in an error queue. If user applications fail to read these timestamps or if the Bluetooth controller is unexpectedly removed, these SKBs are not properly released. This oversight leads to a memory leak, which can degrade system performance or cause a denial of service (DoS).

This flaw affects systems using Bluetooth with SO_TIMESTAMPING enabled for TX timestamps. The memory leak occurs when SKBs queued in sk_error_queue are not consumed before socket destruction or controller removal. The impact is gradual memory exhaustion rather than an immediate crash. RFCOMM sockets are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.