CVE-2026-31393

CVE-2026-31393 is an out-of-bounds read vulnerability in the Linux kernel's Bluetooth L2CAP subsystem. This flaw occurs when processing a truncated L2CAP_INFO_RSP message, where insufficient payload length validation allows reading past the intended data. A malicious Bluetooth device could exploit this by sending a specially crafted response, potentially leading to a denial of service or information disclosure due to accessing adjacent kernel memory. The vulnerability has no assigned CVSS score, and its EPSS is extremely low (0.00024%), suggesting a very low probability of exploitation. There is currently no public exploit code available, nor is it listed on the CISA KEV catalog, with minimal community discussion or media coverage.