CVE-2026-43062

A flaw was found in the Linux kernel's Bluetooth L2CAP component. A type confusion vulnerability exists in the l2cap_ecred_reconf_rsp() function, where incoming data is incorrectly cast. This can lead to valid L2CAP_ECRED_RECONF_RSP packets being rejected and incorrect data being processed, potentially causing a denial of service or unexpected behavior.

Red Hat has evaluated this issue as having Moderate severity because exploitation requires an attacker to be within Bluetooth radio range and communicating over an established L2CAP channel on a host with active Bluetooth hardware. On typical enterprise server deployments, Bluetooth controllers and associated services are neither enabled nor physically present, substantially reducing exposure. In environments where Bluetooth is active, handling malformed response packets can result in communication failures or unexpected state handling, leading to a denial of service without compromising system confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.