PT-2026-55235 · Linux · Linux Kernel

Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-53358

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth L2CAP implementation where calling l2cap chan close() within cleanup listen() causes a lock inversion. Specifically, cleanup listen() operates under the parent sk lock, and attempting to acquire conn->lock to remove a channel from conn->chan l violates the established locking order of conn->lock -> chan->lock -> sk lock. To resolve this, the system schedules l2cap chan timeout with a delay of 0 to close the channel asynchronously, ensuring locks are acquired in the correct sequence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53358

Affected Products

Linux Kernel

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-53358 · Security Note
• https://git.kernel.org/stable/c/8c8e620467a7b51562dbcefbd1f09f288d7d710d · Note
• https://git.kernel.org/stable/c/859d3ace791ed878ae9ba5522c7844d960da8f88 · Note
• https://reddit.com/r/pwnhub/comments/1ulth83/in_the_linux_kernel_the_following_vulnerability · Reddit Post
• https://git.kernel.org/stable/c/deb8493a8fa599f6c95e2465b12bfdfb7f94a1d9 · Note
• https://git.kernel.org/stable/c/7555fd885a0603f50e49a655850a1f2bd8a25398 · Note
• https://git.kernel.org/stable/c/e1c100e2d61bd8c718b7d91fe3e050780a9bf72d · Note
• https://twitter.com/VulmonFeeds/status/2072775517422387516 · Twitter Post
• https://git.kernel.org/stable/c/89dec92041717b027216e110599e4f6d6c921b79 · Note
• https://git.kernel.org/stable/c/3634cbdc2eb414b69ffa752ddbe5e0458518e321 · Note
• https://git.kernel.org/stable/c/50dfec218808b148ab4247b1858031b7a32015c5 · Note