CVE-2026-98602

A flaw was found in the Linux kernel's Bluetooth Network Encapsulation Protocol (BNEP) implementation. Insufficient length validation when processing network frames allows out-of-bounds memory read operations. An attacker can exploit this vulnerability by transmitting malformed or truncated network frames, leading to a Denial of Service (DoS) via a system crash or information disclosure through leaked kernel memory.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation is constrained to adjacent network proximity over Bluetooth and requires the system to have Bluetooth hardware actively running BNEP services. Default Red Hat Enterprise Linux server installations rarely enable Bluetooth interfaces or establish BNEP network sessions, which significantly restricts the practical attack surface. In environments where Bluetooth networking is enabled, an unauthenticated attacker within wireless range could trigger a kernel crash or leak sensitive kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.