CVE-2026-15460 | Zephyr Project up to 4.4.1 L2CAP Receive l2cap_br.c bt_l2cap_br_recv race condition (EUVD-2026-75212)

September 10, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Zephyr Project Zephyr up to 4.4.1. The affected element is the function bt_l2cap_br_recv of the file subsys/bluetooth/host/classic/l2cap_br.c of the component L2CAP Receive Handler. Performing a manipulation results in race condition.

This vulnerability was named CVE-2026-15460. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More