CVE-2026-85036 | ZephyrProject Zephyr up to 4.3.1/4.4.x AVDTP avdtp.c bt_avdtp_l2cap_disconnected denial of service (ec822ceed83b/2bd5ea88c69b)

November 4, 2026 Yanac

A vulnerability marked as problematic has been reported in ZephyrProject Zephyr up to 4.3.1/4.4.x. This issue affects the function bt_avdtp_l2cap_disconnected of the file subsys/bluetooth/host/classic/avdtp.c of the component AVDTP. The manipulation leads to denial of service.

This vulnerability is listed as CVE-2026-85036. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More