CVE-2026-31772

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface (HCI) synchronization. A local user could trigger a stack buffer overflow by binding a specific type of Bluetooth socket with an excessive number of Bluetooth Isochronous Stream (BIS) entries. This memory corruption can lead to a system crash, resulting in a denial of service.

Red Hat has evaluated this vulnerability as having a Moderate severity because exploitation is restricted to local unprivileged users and requires interaction with the Bluetooth subsystem. An attacker must possess local execution privileges to create and configure a Bluetooth Isochronous socket with an excessive number of broadcast stream entries. While the resulting out-of-bounds stack write leads to kernel memory corruption and a system crash, practical privilege escalation is limited by kernel stack hardening and layout constraints.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.