Resource exhaustion in Linux kernel - CVE-2026-98809
Published: October 22, 2026
Vulnerability details
The vulnerability allows a local privileged user to cause a denial of service by blocking Bluetooth controller unregistration for an extended period.
The vulnerability exists due to uncontrolled resource consumption in the Linux kernel Bluetooth HCI synchronous command worker when draining an unbounded command backlog during controller unregistration after command processing has been disabled. A local privileged user can queue MGMT commands against an unresponsive controller and close /dev/vhci to cause controller unregistration to wait for a separate timeout for each queued command.
Each queued HCI command incurs a two-second timeout; a locally reproduced backlog of more than 5,000 entries resulted in hours of blocking.
Affected software
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo
How to mitigate CVE-2026-98809
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1
External References
- https://git.kernel.org/stable/c/143bde97c4101ae68eb656c87e620c45b07a3090
- https://git.kernel.org/stable/c/7f16443a30f4e86d84ae4faf057d333b41ddb757
- https://git.kernel.org/stable/c/b11acfcb5925ed27fae692b27931a1ac732677fb
- https://git.kernel.org/stable/c/b1f24c1ab52345e810c42a1a81286cb5a7c92252
- https://git.kernel.org/stable/c/e8ba8c9c74d1035042cdf6cb5adf8f59b9b1271c