CVE-2026-98458

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can cause a Denial of Service (DoS) through a reference count leak during Bluetooth Isochronous (ISO) channel attachment. When a socket attempts to attach to a channel that is already connected or in use by another socket, the kernel fails to release acquired connection holds. Repeated connection attempts under these conditions can prevent connection resources from being freed, resulting in system resource exhaustion.

This vulnerability is rated as having Low severity because exploitation requires local system privileges to establish Bluetooth network sockets, and the hold leak only causes gradual memory resource consumption leading to denial of service without compromising system integrity or confidentiality. Enterprise server environments rarely deploy or enable Bluetooth subsystems, substantially limiting exposure to systems equipped with active Bluetooth hardware and local user access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.