CVE-2026-64206

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol (L2CAP) subsystem. A local attacker could trigger a deadlock during connection teardown due to a circular locking dependency between l2cap_conn_del() and process_pending_rx() functions. This vulnerability can lead to a denial of service (DoS) condition, making the system unresponsive.

This vulnerability is rated as Moderate because it is restricted to local system access or active Bluetooth device interactions, resulting strictly in a denial of service without compromising data confidentiality or system integrity. In default enterprise server installations, Bluetooth hardware and protocols are rarely present or enabled, mitigating exposure in typical datacenter environments. Workstations, edge platforms, or in-vehicle deployments utilizing active Bluetooth links are vulnerable to a kernel deadlock during connection teardown, causing the host to hang.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.