A memory safety flaw in the Linux kernel Bluetooth subsystem poses a significant risk of denial of service or information disclosure via adjacent network access.

This is a validate-after-use memory corruption vulnerability in the L2CAP layer. An unauthenticated attacker can supply a malformed Bluetooth configuration option, causing the kernel to read past the end of a buffer before checking the validity of the option length.

The vulnerability carries a CVSS score of 7.1, indicating a high level of risk. An attacker within Bluetooth range can potentially trigger a kernel crash, resulting in a denial of service for affected devices. While the current implementation prevents immediate data leakage in the control flow, the flaw represents a dangerous memory safety issue that could be leveraged for system instability or future exploitation vectors.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later, depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics or Bluetooth service restarts that occur without clear cause, as these may indicate attempted exploitation.

Compensating Controls: Disable Bluetooth on affected systems if the functionality is not required for business operations to eliminate the attack vector entirely.

Public Exploit Available: No (exploit_available: false)

Given the nature of kernel-level vulnerabilities, immediate patching is recommended to ensure system stability. Security teams should prioritize the application of kernel updates across all affected infrastructure, particularly on mobile or IoT devices where Bluetooth connectivity is frequently enabled and exposed to adjacent network threats.