CVE-2026-53209

A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hci_sync component. This vulnerability occurs when the hci_adv_bcast_annoucement() function attempts to prepend Broadcast Announcement service data to an existing advertising payload that is already at its maximum size. This can lead to an oversized data packet that may overrun a temporary buffer, potentially causing a denial of service (DoS) or other unpredictable system behavior.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.