CVE-2026-53357

A flaw was found in the Linux kernel's Bluetooth component. A Use-After-Free (UAF) vulnerability exists in the l2cap_sock_cleanup_listen() and l2cap_conn_del() functions. This flaw occurs due to a race condition during the cleanup of a listening socket and a concurrent Bluetooth (HCI) disconnect. An unprivileged local attacker could potentially exploit this to cause a system crash, leading to a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.