A state management vulnerability in the Linux kernel Bluetooth stack may allow an unauthenticated attacker to cause memory inconsistencies by failing to clear identifiers during reconfiguration.

The vulnerability exists in the l2cap_ecred_reconf_rsp function, which fails to correctly clear the chan->ident field upon a successful response. An unauthenticated adjacent attacker could potentially leverage this stale state to interfere with subsequent channel operations.

While the primary risk is memory inconsistency, it may lead to denial of service or unpredictable behavior in the Bluetooth stack. Given the CVSS score of 8.8, this flaw constitutes a high-severity risk to system reliability and potential security bypasses in the networking layer.

Immediate Action: Update the Linux kernel to version 5.10.259, 5.15.210, 6.1.176, 6.6.143, or later.

Proactive Monitoring: Audit logs for unusual Bluetooth control traffic or repeated re-configuration requests that deviate from normal protocol behavior.

Compensating Controls: Implement physical or logical access controls to limit exposure to the Bluetooth interface on exposed hardware.

Public Exploit Available: Unknown

Users should prioritize updating their Linux kernel to the latest available patched version. Regular maintenance of the kernel is essential to mitigate risks associated with the Bluetooth protocol stack, which is a frequent target for local and adjacent network attacks.