SB20261022425 - Resource exhaustion in Linux kernel bluetooth

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261022425

SB20261022425 - Resource exhaustion in Linux kernel bluetooth

Published: October 22, 2026

Security Bulletin ID SB20261022425
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Resource exhaustion (CVE-ID: CVE-2026-98809)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local privileged user to cause a denial of service by blocking Bluetooth controller unregistration for an extended period.

The vulnerability exists due to uncontrolled resource consumption in the Linux kernel Bluetooth HCI synchronous command worker when draining an unbounded command backlog during controller unregistration after command processing has been disabled. A local privileged user can queue MGMT commands against an unresponsive controller and close /dev/vhci to cause controller unregistration to wait for a separate timeout for each queued command.

Each queued HCI command incurs a two-second timeout; a locally reproduced backlog of more than 5,000 entries resulted in hours of blocking.


Remediation

Install update from vendor's website.

References