Linux Kernel Bluetooth L2CAP Memory Leak Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's Bluetooth L2CAP implementation. The issue arises in the vhci_write function of the HCI VHCI driver, where a socket buffer (skb) is allocated but not properly freed after processing certain ACL data packets. This leak occurs when the initial fragment of a packet lacks the L2CAP length, causing the HCI core to copy the skb into the connection's rx_skb without releasing it. As a result, unreferenced objects remain in memory, leading to increased memory usage.

Impact

Exploitation of this vulnerability causes a memory leak, where allocated memory is not released, potentially leading to increased memory consumption and degradation of system performance over time.

Remediation

Users can apply the latest patches available in the Linux kernel Git repository to address this vulnerability.