CVE-2026-93209

A flaw was found in the Linux kernel's Bluetooth subsystem. Under conditions of memory pressure, a function responsible for handling Bluetooth commands can fail to properly track command completion. This can lead to intermittent failures when enabling Bluetooth, resulting in a denial of service where Bluetooth functionality becomes unavailable to a local user.

This vulnerability is rated with a Low impact because triggering the condition requires severe memory exhaustion and only leads to a transient denial of service during Bluetooth adapter initialization without compromising host integrity or confidentiality. In standard Red Hat Enterprise Linux server deployments, Bluetooth hardware is commonly absent or disabled, which significantly restricts real-world exposure. Local unprivileged users cannot exploit this issue to escalate privileges or affect unrelated system operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.