CVE-2026-72336

A flaw was found in the Linux kernel's Bluetooth 6LoWPAN (IPv6 over Low-Power Wireless Personal Area Networks) component. A race condition exists where an L2CAP (Logical Link Control and Adaptation Protocol) connection is accessed after its protection is dropped, allowing it to be deallocated concurrently. This can lead to a use-after-free vulnerability, which a local attacker could exploit to cause a denial of service or potentially escalate privileges.

This vulnerability is rated as Moderate impact because exploiting the race condition requires local access with permissions to interact with Bluetooth debugfs interfaces, limiting the primary blast radius to a local denial of service through a system crash. In typical Red Hat Enterprise Linux server environments, Bluetooth hardware is absent and 6LoWPAN networking modules are not loaded by default. Systems are only exposed if Bluetooth hardware is active, the 6LoWPAN subsystem is operational, and concurrent connection teardowns can be timed during debugfs operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.