In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb.
The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 22, 2026 |
| Ubuntu | — | Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-intelUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-gkeopUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-azure-fde-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-fips-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1064-gcp-fips | Jul 20, 2026 | Apr 22, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub