CVE-2026-46111

A flaw was found in the Linux kernel's Bluetooth subsystem. The create_big_complete function, when handling errors during the creation of a Bluetooth Isochronous Group (BIG) synchronization, could attempt to access memory that has already been freed. This use-after-free (UAF) vulnerability could allow a local attacker to cause a denial of service (system crash) or potentially execute arbitrary code.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and an active Bluetooth adapter handling Isochronous Group synchronizations, primarily resulting in a denial of service via a kernel crash. Enterprise server environments rarely have Bluetooth hardware enabled or in active use, limiting exposure under typical deployments. Additionally, older product releases including Red Hat Enterprise Linux 7 and 8 do not contain the affected code and are not impacted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.