CVE-2026-97908

A flaw was found in the Linux kernel's Qualcomm SMD Bluetooth driver. An improper cleanup sequence frees the core Bluetooth device structure before shutting down communication endpoints during device removal or initialization errors. If incoming data arrives during this teardown window, the driver accesses already freed memory. A local attacker could exploit this race condition to trigger a use-after-free flaw, leading to a Denial of Service (DoS) or potential arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.