CVE-2026-19740 | Zephyr Project up to 4.4.x Bluetooth LE Controller ull_llcp_phy.c llcp_lp_pu_rx resource consumption

October 11, 2026 Yanac

A vulnerability has been found in Zephyr Project Zephyr up to 4.4.x and classified as critical. The affected element is the function llcp_lp_pu_rx of the file subsys/bluetooth/controller/ll_sw/ull_llcp_phy.c of the component Bluetooth LE Controller. The manipulation leads to resource consumption.

This vulnerability is documented as CVE-2026-19740. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More