CVE-2026-31498: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop

Q: What is the severity of CVE-2026-31498?

CVE-2026-31498 is considered a high severity vulnerability due to its potential to cause an infinite loop in the Linux kernel.

Q: How do I fix CVE-2026-31498?

To fix CVE-2026-31498, update your Linux kernel to the latest version that includes the patch addressing this vulnerability.

Q: What software is affected by CVE-2026-31498?

CVE-2026-31498 affects the Linux kernel, specifically versions that handle Bluetooth L2CAP configurations.

Q: What type of vulnerability is CVE-2026-31498?

CVE-2026-31498 is a logic vulnerability in the Bluetooth stack of the Linux kernel related to L2CAP protocol handling.

Q: Can CVE-2026-31498 be exploited remotely?

Yes, CVE-2026-31498 may be exploited remotely, allowing attackers to potentially disrupt Bluetooth communication.

Published Apr 22, 2026

Updated

Bluetooth: L2CAP: Fix ERTM re-init and zero pdulen infinite loop

Affected Software

22 affected componentsFixes available

Linux Linux kernel

Linux Linux kernel>=4.4.238<4.5

Linux Linux kernel>=4.9.238<4.10

Linux Linux kernel>=4.14.200<4.15

Linux Linux kernel>=4.19.149<4.20

Linux Linux kernel>=5.4.69<5.5

Linux Linux kernel>=5.7.1<5.10.253

Linux Linux kernel>=5.11<5.15.203

Linux Linux kernel>=5.16<6.1.168

Linux Linux kernel>=6.2<6.6.131

Linux Linux kernel>=6.7<6.12.80

Linux Linux kernel>=6.13<6.18.21

Linux Linux kernel>=6.19<6.19.11

Linux Linux kernel=5.7

Linux Linux kernel=7.0-rc1

Linux Linux kernel=7.0-rc2

Linux Linux kernel=7.0-rc3

Linux Linux kernel=7.0-rc4

Linux Linux kernel=7.0-rc5

Linux Linux kernel=7.0-rc6

Linux Linux kernel=7.0-rc7

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1

Event History

Apr 22, 2026

CVE Published

via MITRE·01:54 PM

Data Sourced

via MITRE·01:54 PM

Description

Data Sourced

via NVD·02:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

Apr 23, 2026

Data Sourced

via Microsoft·08:09 AM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2026-31498?

CVE-2026-31498 is considered a high severity vulnerability due to its potential to cause an infinite loop in the Linux kernel.

How do I fix CVE-2026-31498?

To fix CVE-2026-31498, update your Linux kernel to the latest version that includes the patch addressing this vulnerability.

What software is affected by CVE-2026-31498?

CVE-2026-31498 affects the Linux kernel, specifically versions that handle Bluetooth L2CAP configurations.

What type of vulnerability is CVE-2026-31498?

CVE-2026-31498 is a logic vulnerability in the Bluetooth stack of the Linux kernel related to L2CAP protocol handling.

Can CVE-2026-31498 be exploited remotely?

Yes, CVE-2026-31498 may be exploited remotely, allowing attackers to potentially disrupt Bluetooth communication.

CVE-2026-31498: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-31498?

How do I fix CVE-2026-31498?

What software is affected by CVE-2026-31498?

What type of vulnerability is CVE-2026-31498?

Can CVE-2026-31498 be exploited remotely?

Company

Resources

Contact