CVE-2026-98600

A flaw was found in the Linux kernel's Bluetooth RFCOMM (Radio Frequency Communication) subsystem. This vulnerability allows an adjacent attacker within Bluetooth range to cause a Denial of Service (DoS) by transmitting a specially crafted frame with an extended length field. Because the kernel fails to adequately validate the minimum length of these frames, internal buffer adjustments fail and the unstripped packet header is mistakenly processed as a command or application payload, leading to unexpected behavior or system disruption.

This vulnerability is rated as Moderate impact because an attacker must be in adjacent physical proximity to send malicious Bluetooth frames, and exploitation results in a denial of service without unauthorized access or data disclosure. Typical Red Hat Enterprise Linux server environments do not deploy Bluetooth hardware or enable Bluetooth services, substantially mitigating real-world exposure. Furthermore, default installations of supported Red Hat Enterprise Linux releases do not include the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.