CVE-2026-63976

A flaw was found in the Linux kernel's Bluetooth L2CAP (Logical Link Control and Adaptation Protocol) implementation. A remote attacker, acting as a peer, could exploit a vulnerability where the system fails to clear a channel identifier after a successful Enhanced Credit Based Mode (ECRED) reconfiguration. By replaying a failure response with this stale identifier, the attacker can force the kernel to terminate an active Bluetooth connection, leading to a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because successful exploitation requires adjacent peer interaction over an active Bluetooth connection and only results in the termination of the established communication channel, without leading to arbitrary code execution or disclosure of system memory. Red Hat Enterprise Linux systems deployed in standard server environments typically lack Bluetooth hardware or do not run Bluetooth services, substantially limiting real-world exposure. The risk is primarily confined to workstations, laptops, or edge systems configured with active Bluetooth adapters and paired peripherals.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.