cve-2026-31498

CVE-2026-31498 is a vulnerability in the Linux kernel's Bluetooth L2CAP layer, specifically in the Enhanced Retransmission Mode (ERTM) handling. It involves two issues: an ERTM reinitialization leak that can exhaust memory, and an infinite loop triggered by a zero-length PDU length slipping through segmentation logic. These are state-machine failures and validation gaps in long-lived protocol code, not dramatic buffer overflows. The vulnerability can destabilize systems and is noted in Microsoft's Security Update Guide. Discussions on WindowsForum cover the technical details, implications for system stability, and the importance of patching affected Linux kernels.