Linux Kernel Bluetooth L2CAP Connection Management Deadlock Vulnerability

A deadlock vulnerability has been identified in the Bluetooth L2CAP connection management of the Linux kernel. The issue arises in the 'l2cap_conn_del()' function, which cancels delayed work for timers while holding a lock on the connection. This creates a potential deadlock scenario, as the work functions can also acquire the same lock, leading to a conflict if the work is in progress when the lock is taken. The vulnerability affects the Linux kernel's stable group.

Impact

Exploitation of this vulnerability can lead to a deadlock situation, causing the system to hang or become unresponsive while the connection management process is stalled.

Remediation

The vulnerability has been addressed in the official Linux Git repository. Users can download the patched version from the Linux kernel stable tree.