CVE-2026-53255: Bluetooth: MGMT: validate advertising TLV before type checks
Bluetooth: MGMT: validate advertising TLV before type checks
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Compensating control
Apply the Linux kernel fix for KASAN-reported vmalloc-out-of-bounds in tlv_data_is_valid()/MGMT_OP_ADD_ADVERTISING by moving the existing element-length check before any type-octet (data[i+1]) inspection so the parser verifies the field fits inside the supplied buffer before reading the type byte.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53255?
CVE-2026-53255 has a risk score of 17, indicating a high severity vulnerability.
How does CVE-2026-53255 affect the Linux kernel?
CVE-2026-53255 affects the Linux kernel by allowing improper validation of Bluetooth advertising data, which can lead to security issues.
How do I fix CVE-2026-53255?
To fix CVE-2026-53255, update your Linux kernel to the latest version that contains the patch for this vulnerability.
What are the potential impacts of CVE-2026-53255?
The potential impacts of CVE-2026-53255 include unauthorized access and manipulation of Bluetooth communication.
Is CVE-2026-53255 present in all Linux distributions?
CVE-2026-53255 may not be present in all Linux distributions, but those using affected kernel versions are at risk.