CVE-2026-98457

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol (L2CAP) implementation. An adjacent attacker within Bluetooth range could exploit this vulnerability by transmitting specially crafted, undersized network frames. Because the kernel fails to validate packet length before processing control and Frame Check Sequence (FCS) fields, an out-of-bounds read occurs. This flaw primarily results in a system crash, leading to a Denial of Service (DoS), and may potentially expose sensitive kernel memory.

This vulnerability is rated as having a Moderate impact because exploitation requires adjacent physical proximity and an active Bluetooth interface on the host. In typical Red Hat Enterprise Linux server environments, Bluetooth adapters are absent or unconfigured by default, significantly reducing the attack surface. While processing maliciously crafted frames can crash the kernel and trigger a denial of service, an attacker cannot exploit this flaw remotely over a standard IP network.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.