A memory management error in the Linux kernel L2CAP layer allows unauthenticated attackers to trigger a kernel crash via malformed Bluetooth connection packets.

The vulnerability resides in the l2cap_ecred_conn_rsp function. An unauthenticated adjacent attacker can send a specially crafted packet that triggers an invalid channel deletion, leading to memory corruption or a kernel panic.

Successful exploitation results in a denial of service, forcing a system reboot and disrupting critical services. With a CVSS score of 8.8, this vulnerability poses a high risk to the availability of systems using Bluetooth, particularly in environments where high uptime is required.

Immediate Action: Update the Linux kernel to version 5.10.259, 5.15.210, 6.1.176, 6.6.143, or newer.

Proactive Monitoring: Review dmesg and system logs for L2CAP related errors or unexpected kernel crashes following Bluetooth activity.

Compensating Controls: Restrict Bluetooth radio access to trusted environments or disable the Bluetooth subsystem if it is not essential for the host hardware.

Public Exploit Available: Unknown

The severity of this issue necessitates immediate patching. Organizations should coordinate with their Linux distribution maintainers to ensure that the kernel updates are applied to all affected endpoints.