CVE-2026-99239 Linux Kernel Bluetooth L2CAP - Race Condition

Linux kernel Bluetooth L2CAP contains a race condition caused by improper state checks and locking in __l2cap_chan_add and related functions, letting attackers cause inconsistent channel states, exploit requires concurrent operations.

CVSS base score 7.8 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Required
View the NVD record ↗