CVE-2026-19739 | Zephyr Project up to 4.4.x Bluetooth Link Layer ull_llcp_conn_upd.c llcp_rr_check_done denial of service

October 11, 2026 Yanac

A vulnerability, which was classified as critical, was found in Zephyr Project Zephyr up to 4.4.x. Impacted is the function llcp_rr_check_done of the file subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c of the component Bluetooth Link Layer. Executing a manipulation can lead to denial of service.

This vulnerability is registered as CVE-2026-19739. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More