CVE-2026-98290

A flaw was found in the Linux kernel's Bluetooth RFCOMM (Radio Frequency Communication) subsystem. A local user can cause a Denial of Service (DoS) by triggering a kernel deadlock that hangs the system. This issue occurs during the cleanup of listening sockets, where child socket locks and internal RFCOMM locks are acquired in reverse order relative to connection-handling tasks, resulting in a lock inversion.

This vulnerability is rated as Moderate impact because triggering the deadlock requires local access and precise timing between socket termination and connection handling, with consequences limited to a denial of service. The flaw affects availability by inducing a kernel hang, while data confidentiality and system integrity remain unaffected. Furthermore, Bluetooth subsystems are typically disabled or unused in standard enterprise server deployments, greatly limiting practical exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.